CVE-2017-3756

CVE-2017-3756 affects Lenovo Active Protection System for ThinkPad on affected ThinkPad models, with vulnerable versions earlier than 1.82.0.17. The root cause is an unquoted service path that an attacker with local privileges can exploit to execute code with administrative privileges. Lenovo adv...

CVE-2016-8222

CVE-2016-8222 concerns a signed kernel driver in Lenovo ThinkPad BIOS enabling a local attacker with Windows administrator privileges to call System Management Mode (SMM) services. This can cause denial of service or allow alteration of certain BIOS variables/settings (e.g., boot sequence); BIOS ...