CVE-2023-45079

< m1ukt72a

A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges t

6.7MEDIUM

CVE-2023-45078

< m1ukt72a

A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated pri

6.7MEDIUM

CVE-2023-45077

< m1ukt72a

A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to

6.7MEDIUM

CVE-2023-45076

< m1ukt72a

A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to

6.7MEDIUM

CVE-2023-45075

< m1ukt72a

A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privilege

6.7MEDIUM

CVE-2022-48188

< m1ukt70a

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an att

6.7MEDIUM

CVE-2022-48181

< m1ukt70a

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with loca

6.7MEDIUM

CVE-2022-40136

< m1ukt67a

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an a

4.4MEDIUM

CVE-2022-40135

< m1ukt67a

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local a

4.4MEDIUM

CVE-2019-6190

< m1vkt4ba

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop

5.0MEDIUM

CVE-2019-6188

all versions

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS vers

9.8CRITICAL

CVE-2019-6172

all versions

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checkin

6.4MEDIUM

CVE-2019-6170

all versions

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phas

6.4MEDIUM

CVE-2019-6156

< m1ukt33a

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an

3.3LOW