CVE-2022-48181

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...

Stack overflow

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...

CVE-2022-4569

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...

CVE-2022-4569

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...

Privilege escalation

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...

CVE-2022-48181

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...

CVE-2022-48181

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...

CVE-2022-48181

The CVE-2022-48181 entry describes a stack-based buffer overflow in the ErrorMessage driver of Lenovo ThinkPad BIOS. The vulnerability exists in BIOS and can be exploited by a local attacker with physical or prior local access to elevate privileges and execute arbitrary code. The affected compone...

CVE-2022-4569

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...

CVE-2022-4569

The CVE-2022-4569 entry concerns Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool. Affected component is the firmware update tool; root cause is insufficient input validation within the tool, enabling a local attacker to execute code with elevated privileges during a package upgr...

CVE-2022-4569

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...

ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool 安全漏洞

Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool is a firmware update tool from Lenovo China. A security vulnerability exists in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool, which originated from a vulnerability that allows an attacker with local access...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad BIOS that stems from the presence of a stack-based buffer overflow vulnerability...

PT-2023-15604 · Lenovo · Thinkpad

Name of the Vulnerable Software and Affected Versions: ThinkPad affected versions not specified Description: A stack-based buffer overflow vulnerability in the ErrorMessage driver of some ThinkPad models' BIOS could allow an attacker with local access to elevate their privileges and execute...

ThinkPad Dock Firmware Update Tool Elevation of Privilege Vulnerability - Lenovo Support US

No description provided...

PT-2023-3168 · Lenovo · Thinkpad Hybrid Usb-C With Usb-A Dock

Name of the Vulnerable Software and Affected Versions: ThinkPad Hybrid USB-C with USB-A Dock affected versions not specified Description: The issue is related to insufficient input validation in the firmware update tool, which could allow an attacker with local access to execute code with elevate...

The vulnerability of the BIOS microprogramming system in ThinkPad notebooks allows a hacker to execute arbitrary code.

The vulnerability of the BIOS microprogramming system in ThinkPad notebooks exists due to insufficient checking of input data in the SMI handler. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of ThinkPad laptop microprogramming software exists due to a flaw in the BIOS’ mechanism for detecting unauthorized access. This flaw allows a intruder to execute arbitrary code.

The vulnerability of the BIOS microprogramming system in ThinkPad laptops exists due to a flaw in the mechanism for detecting unauthorized access to the BIOS. Exploiting this vulnerability can allow an intruder to execute arbitrary code...

ThinkPad BIOS Vulnerabilities - Lenovo Support US

No description provided...

PT-2023-2022 · Lenovo · Thinkpad X13 Gen3 +1

Name of the Vulnerable Software and Affected Versions: ThinkPad T14s Gen 3 and X13 Gen3 affected versions not specified Description: A vulnerability exists in the BIOS of ThinkPad laptops due to an error in the BIOS tamper detection mechanism. This could allow unauthorized access under specific...