CVE-2022-40136

< m1ckt49a

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an a

4.4MEDIUM

CVE-2022-40135

< m1ckt49a

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local a

4.4MEDIUM

CVE-2019-19705

< 6.0.8924.1

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH

7.8HIGH

CVE-2021-4211

all versions

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, a

6.7MEDIUM

CVE-2021-4210

all versions

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge

6.7MEDIUM

CVE-2021-3519

< m1ckt47a

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS P

6.4MEDIUM

CVE-2019-6190

< m1ckt40a

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop

5.0MEDIUM

CVE-2019-6188

all versions

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS vers

9.8CRITICAL

CVE-2019-6172

all versions

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checkin

6.4MEDIUM

CVE-2019-6170

all versions

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phas

6.4MEDIUM

CVE-2019-10724

< 6.0.1.8642

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes

6.5MEDIUM

CVE-2019-6156

all versions

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an

3.3LOW

CVE-2017-3753

all versions

A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI)

6.8MEDIUM