Advisories · Technology

Lenovo ThinkPad BIOS.

Every CVE that names Lenovo ThinkPad BIOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-5078 CVE record

CVSS 6.7 Medium

Lenovo ThinkPad BIOS: A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local…
- Lenovo ThinkPad BIOS
- CWE-1419
Not analysed yet 8 Nov 2023
CVE-2022-4575 CVE record

CVSS 6.7 Medium

Incorrect default permissions in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- Broken access control
Not analysed yet 30 Oct 2023
CVE-2022-48189 CVE record

CVSS 6.7 Medium

Improper input validation in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- CWE-20
Not analysed yet 30 Oct 2023
CVE-2022-4574 CVE record

CVSS 6.7 Medium

Improper input validation in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- CWE-20
Not analysed yet 30 Oct 2023
CVE-2022-1108 CVE record

CVSS 6.7 Medium

Improper input validation in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- CWE-20
Not analysed yet 22 Apr 2022
CVE-2022-1107 CVE record

CVSS 6.7 Medium

Improper input validation in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- CWE-20
Not analysed yet 22 Apr 2022
CVE-2021-3843 CVE record

CVSS 6.7 Medium

Improper input validation in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- CWE-20
Not analysed yet 12 Nov 2021
CVE-2021-3718 CVE record

CVSS 4.3 Medium

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
- Lenovo ThinkPad BIOS
- CWE-232
Not analysed yet 12 Nov 2021
CVE-2021-3599 CVE record

CVSS 6.7 Medium

Improper input validation in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- CWE-20
Not analysed yet 12 Nov 2021
CVE-2021-3452 CVE record

CVSS 6.7 Medium

Improper input validation in Lenovo ThinkPad BIOS
- Lenovo ThinkPad BIOS
- CWE-20
Not analysed yet 16 Jul 2021