Vulnerabilities (CVE)

Filtered by vendor Lenovo Subscribe
Filtered by product 63
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-6170 1 Lenovo 784 130-14ikb, 130-14ikb Firmware, 130-15ikb and 781 more 2020-12-08 4.4 MEDIUM 6.4 MEDIUM
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.
CVE-2019-6172 1 Lenovo 784 130-14ikb, 130-14ikb Firmware, 130-15ikb and 781 more 2020-12-08 4.4 MEDIUM 6.4 MEDIUM
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
CVE-2017-3753 1 Lenovo 219 63, 63 Firmware, H50-30g and 216 more 2017-08-29 7.2 HIGH 6.8 MEDIUM
A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.