Advisories · Technology
Lenovo BIOS.
Every CVE that names Lenovo BIOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.7 Medium
Missing authentication in Lenovo BIOS
- Lenovo BIOS
- Authentication bypass
- CVSS 6.7 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Incorrect default permissions in Lenovo BIOS
- Lenovo BIOS
- Broken access control
- CVSS 6.7 Medium
Buffer overflow in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 4.4 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 4.4 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 4.4 Medium
Out-of-bounds read in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Incorrect default permissions in Lenovo BIOS
- Lenovo BIOS
- Broken access control
- CVSS 6.7 Medium
Incorrect default permissions in Lenovo BIOS
- Lenovo BIOS
- Broken access control
- CVSS 6.7 Medium
Heap-based buffer overflow in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Heap-based buffer overflow in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Heap-based buffer overflow in Lenovo BIOS
- Lenovo BIOS
- Memory corruption
- CVSS 6.7 Medium
Improper input validation in Lenovo BIOS
- Lenovo BIOS
- CWE-20
- CVSS 6.7 Medium
Improper input validation in Lenovo BIOS
- Lenovo BIOS
- CWE-20
- CVSS 6.7 Medium
Improper input validation in Lenovo BIOS
- Lenovo BIOS
- CWE-20
- CVSS 6.8 Medium
Protection mechanism failure in Lenovo BIOS
- Lenovo BIOS
- CWE-693
- CVSS 6.4 Medium
Time-of-check time-of-use race condition in Lenovo BIOS
- Lenovo BIOS
- Race condition
- CVSS 2.4 Low
Lenovo BIOS: In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to…
- Lenovo BIOS
- CWE-358
- CVSS 6.4 Medium
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
- Lenovo BIOS
- CVSS 6.4 Medium
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.
- Lenovo BIOS
- CVSS 6.1 Medium
Lenovo BIOS: The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395…
- Lenovo BIOS
- CVSS 6.4 Medium
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
- Lenovo BIOS
- CVSS 6.4 Medium
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- Lenovo BIOS
- CVSS 6.4 Medium
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
- Lenovo BIOS
- CVSS 6.4 Medium
Active debug code in Lenovo BIOS
- Lenovo BIOS
- CWE-489
- CVSS 5.0 Medium
Lenovo BIOS: Lenovo was notified of a potential denial of service vulnerability…
- Lenovo BIOS
- CVSS 6.4 Medium
Lenovo BIOS: A vulnerability was reported in various BIOS versions of older ThinkPad systems that…
- Lenovo BIOS
-
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash.
- Lenovo BIOS