CVE-2022-35897

An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacker modifies specific UEFI variables, it can cause a stack overflow, leading to arbitrary code execution. The specific variables are normally...

Lenovo IdeaPad Y700-14ISK 安全漏洞

Lenovo IdeaPad is a line of laptops from the Chinese company Lenovo Lenovo. A security vulnerability exists in the Lenovo IdeaPad Y700-14ISK. An attacker could exploit the vulnerability to modify the secure boot settings by modifying the NVRAM variable...

New Lenovo UEFI Firmware Vulnerabilities Affect Millions of Laptops

Three high-impact Unified Extensible Firmware Interface UEFI security vulnerabilities have been discovered impacting various Lenovo consumer laptop models, enabling malicious actors to deploy and execute firmware implants on the affected devices. Tracked as CVE-2021-3970, CVE-2021-3971, and...