PT-2023-2193 · Lenovo · Thinkpad X1 Fold Gen 1

Name of the Vulnerable Software and Affected Versions: ThinkPad X1 Fold Gen 1 affected versions not specified Description: A vulnerability exists due to insufficient input validation in the SMI handler of the ThinkPad X1 Fold Gen 1's BIOS firmware. This could allow an attacker with local access a...

PT-2025-37532

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the Universal Serial Bus USB subsystem, specifically within the ucsi acpi component. A command completion timeout was initially increased to ...

SUSE CVE-2010-3448

drivers/platform/x86/thinkpadacpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service system hang via a 1 read or 2 write operation...

SUSE CVE-2011-2980

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running...

Vulnerabilities fixed in Lenovo ThinkPad X13s

Vulnerabilities have been fixed in the UEFI implementation of Lenovo ThinkPad X13s systems. The vulnerabilities allow an authenticated user with elevated privileges able to execute arbitrary code and view sensitive data. The complexity of such attacks is high. However, the vulnerabilities are...

CVE-2022-4435

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

PT-2023-14450 · Lenovo · Thinkpad X13S Bios

Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver, potentially allowing a local attacker with elevated privileges to cause information...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad, which stems from a vulnerability in its PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause an information disclosure via a...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad BIOS, which stems from its LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure via buffer...

PT-2023-14455 · Lenovo · Thinkpad X13S Bios

Name of the Vulnerable Software and Affected Versions: ThinkPad X13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the LenovoRemoteConfigUpdateDxe driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

PT-2023-14452 · Lenovo · Thinkpad X13S Bios Driver

Name of the Vulnerable Software and Affected Versions: ThinkPadX13s BIOS driver affected versions not specified Description: A buffer over-read issue was reported in the ThinkPadX13s BIOS driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

PT-2023-14451 · Lenovo · Thinkpad X13S

Name of the Vulnerable Software and Affected Versions: ThinkPad X13s BIOS affected versions not specified Description: A buffer over-read issue was reported in the LenovoSetupConfigDxe driver, potentially allowing a local attacker with elevated privileges to cause information disclosure...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from the Chinese company Lenovo. The Lenovo ThinkPad suffers from a security vulnerability that stems from its driver that could allow a local attacker with elevated privileges to cause an information disclosure via a buffer out-of-bounds read...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad suffers from a security vulnerability that stems from its LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause an information disclosure via a buffer out-of-bounds...

ThinkPad X13s BIOS Vulnerabilities - Lenovo Support US

No description provided...

CVE-2019-19705

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 and on many other Lenovo and non-Lenovo products, mishandles DLL preloading...

CVE-2019-19705

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 and on many other Lenovo and non-Lenovo products, mishandles DLL preloading...