Thinkpad Yoga S1 Firmware@* Security Vulnerabilities and Issues — Thinkpad Yoga S1 Firmware@* CVE List

Lucene search

LenovoThinkpad Yoga S1 Firmware*

3 matches found

CVE•added 2019/08/29 12:15 a.m.•155 views

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642,...

6.8CVSS6.5AI score0.00306EPSS

CVE•added 2020/07/22 2:15 p.m.•69 views

CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table.

6CVSS6.4AI score0.00275EPSS

CVE•added 2020/07/22 2:15 p.m.•54 views

CVE-2019-18619

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers.

7.8CVSS7.7AI score0.00101EPSS