CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4433

CVE-2022-4433 is a local, privilege-elevation vulnerability in the Lenovo ThinkPad X13s BIOS, specifically in the LenovoSetupConfigDxe driver. The issue is a buffer over-read that can disclose sensitive information to a local attacker with elevated privileges. Multiple sources confirm the affecte...