627 matches found
Stack overflow
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
Privilege escalation
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-48181
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...
CVE-2022-48181
The CVE-2022-48181 entry describes a stack-based buffer overflow in the ErrorMessage driver of Lenovo ThinkPad BIOS. The vulnerability exists in BIOS and can be exploited by a local attacker with physical or prior local access to elevate privileges and execute arbitrary code. The affected compone...
CVE-2022-48181
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
CVE-2022-4569
The CVE-2022-4569 entry concerns Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool. Affected component is the firmware update tool; root cause is insufficient input validation within the tool, enabling a local attacker to execute code with elevated privileges during a package upgr...
PT-2023-15604 · Lenovo · Thinkpad
Name of the Vulnerable Software and Affected Versions: ThinkPad affected versions not specified Description: A stack-based buffer overflow vulnerability in the ErrorMessage driver of some ThinkPad models' BIOS could allow an attacker with local access to elevate their privileges and execute...
ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool 安全漏洞
Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool is a firmware update tool from Lenovo China. A security vulnerability exists in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool, which originated from a vulnerability that allows an attacker with local access...
Lenovo ThinkPad 缓冲区错误漏洞
Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad BIOS that stems from the presence of a stack-based buffer overflow vulnerability...
CVE-2022-48181: Out-of-bounds Write
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...
CVE-2022-4569: Incorrect Default Permissions
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation...
ThinkPad Dock Firmware Update Tool Elevation of Privilege Vulnerability - Lenovo Support US
No description provided...
PT-2023-3168 · Lenovo · Thinkpad Hybrid Usb-C With Usb-A Dock
Name of the Vulnerable Software and Affected Versions: ThinkPad Hybrid USB-C with USB-A Dock affected versions not specified Description: The issue is related to insufficient input validation in the firmware update tool, which could allow an attacker with local access to execute code with elevate...
The vulnerability of the BIOS microprogramming system in ThinkPad notebooks allows a hacker to execute arbitrary code.
The vulnerability of the BIOS microprogramming system in ThinkPad notebooks exists due to insufficient checking of input data in the SMI handler. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of ThinkPad laptop microprogramming software exists due to a flaw in the BIOS’ mechanism for detecting unauthorized access. This flaw allows a intruder to execute arbitrary code.
The vulnerability of the BIOS microprogramming system in ThinkPad laptops exists due to a flaw in the mechanism for detecting unauthorized access to the BIOS. Exploiting this vulnerability can allow an intruder to execute arbitrary code...