Security feature bypass

A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode SMM services. This could lead to a denial of service attack or allow certain BIOS variables or...

CVE-2016-8222

CVE-2016-8222 concerns a signed kernel driver in Lenovo ThinkPad BIOS enabling a local attacker with Windows administrator privileges to call System Management Mode (SMM) services. This can cause denial of service or allow alteration of certain BIOS variables/settings (e.g., boot sequence); BIOS ...