|
2020-06-09
|
CVE-2020-8323
|
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
|
14iwl_firmware, 330\-14ast_firmware, 330\-15ast_firmware, 330\-17ast_firmware, 340c\-15api_firmware, 340c\-15ast_firmware, 6_pro\-13\-Iwl_firmware, 6_pro\-14\-Iwl_firmware, 720s\-15ikb_firmware, 720s_touch\-15ikb_firmware, 730s\-13iwl_firmware, C640\-Iml_firmware, E42\-80_firmware, E52\-80_firmware, E53\-80_firmware, K22\-80_firmware, K32\-80_kbl_firmware, K32\-80_skl_firmware, K3_firmware, K4\-Iwl_firmware, Miix_720\-12ikb_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-15api_firmware, S145\-15ast_firmware, S540\-13api_firmware, S750\-Iil_firmware, S940\-14iwl_firmware, Thinkbook_13s\-Iwl_firmware, Thinkbook_14s\-Iwl_firmware, Thinkpad_11e_firmware, Thinkpad_11e_yoga_gen_6_firmware, Thinkpad_13_2nd_gen_firmware, Thinkpad_13_firmware, Thinkpad_a275_firmware, Thinkpad_a285_firmware, Thinkpad_a475_firmware, Thinkpad_a485_firmware, Thinkpad_e14_firmware, Thinkpad_e15_firmware, Thinkpad_e455_firmware, Thinkpad_e460_firmware, Thinkpad_e465_firmware, Thinkpad_e470_firmware, Thinkpad_e475_firmware, Thinkpad_e480_firmware, Thinkpad_e485_firmware, Thinkpad_e490_firmware, Thinkpad_e490s_firmware, Thinkpad_e555_firmware, Thinkpad_e560_firmware, Thinkpad_e560p_firmware, Thinkpad_e565_firmware, Thinkpad_e570_firmware, Thinkpad_e575_firmware, Thinkpad_e580_firmware, Thinkpad_e585_firmware, Thinkpad_e590_firmware, Thinkpad_helix_firmware, Thinkpad_l13_firmware, Thinkpad_l1415_firmware, Thinkpad_l380_firmware, Thinkpad_l380_yoga_firmware, Thinkpad_l390_yoga_firmware, Thinkpad_l460_firmware, Thinkpad_l470_firmware, Thinkpad_l480_firmware, Thinkpad_l490_firmware, Thinkpad_l560_firmware, Thinkpad_l570_firmware, Thinkpad_l580_firmware, Thinkpad_l590_firmware, Thinkpad_p1_firmware, Thinkpad_p43s_firmware, Thinkpad_p50_firmware, Thinkpad_p50s_firmware, Thinkpad_p51_firmware, Thinkpad_p51s_firmware, Thinkpad_p52_firmware, Thinkpad_p52s_firmware, Thinkpad_p53_firmware, Thinkpad_p53s_firmware, Thinkpad_p70_firmware, Thinkpad_p71_firmware, Thinkpad_p72_firmware, Thinkpad_p73_firmware, Thinkpad_r14_firmware, Thinkpad_r490_firmware, Thinkpad_r590_firmware, Thinkpad_s1_3rd_firmware, Thinkpad_s1_firmware, Thinkpad_s1_yoga_firmware, Thinkpad_s1_yoga_vpro_firmware, Thinkpad_s2_yoga_3rd_gen_firmware, Thinkpad_s2_yoga_4th_gen_firmware, Thinkpad_s3_3rd_gen_firmware, Thinkpad_s3_firmware, Thinkpad_s3_gen_2_firmware, Thinkpad_s540_firmware, Thinkpad_s5_2nd_gen_firmware, Thinkpad_s5_firmware, Thinkpad_s5_yoga_15_firmware, Thinkpad_t25_firmware, Thinkpad_t440_firmware, Thinkpad_t440p_firmware, Thinkpad_t440s_firmware, Thinkpad_t460_firmware, Thinkpad_t460p_firmware, Thinkpad_t460s_firmware, Thinkpad_t470_firmware, Thinkpad_t470p_firmware, Thinkpad_t470s_firmware, Thinkpad_t480_firmware, Thinkpad_t480s_firmware, Thinkpad_t490_firmware, Thinkpad_t490s_firmware, Thinkpad_t495_firmware, Thinkpad_t495s_firmware, Thinkpad_t540_firmware, Thinkpad_t540p_firmware, Thinkpad_t550_firmware, Thinkpad_t560_firmware, Thinkpad_t570_firmware, Thinkpad_t580_firmware, Thinkpad_t590_firmware, Thinkpad_w540_firmware, Thinkpad_w541_firmware, Thinkpad_w550s_firmware, Thinkpad_x140e_firmware, Thinkpad_x1_carbon_\(20ax\)_firmware, Thinkpad_x1_carbon_\(20bx\)_firmware, Thinkpad_x1_carbon_firmware, Thinkpad_x1_extreme_firmware, Thinkpad_x1_tablet_firmware, Thinkpad_x1_yoga_firmware, Thinkpad_x240_firmware, Thinkpad_x240s_firmware, Thinkpad_x250_firmware, Thinkpad_x260_firmware, Thinkpad_x270_firmware, Thinkpad_x280_firmware, Thinkpad_x380_yoga_firmware, Thinkpad_x390_firmware, Thinkpad_x390_yoga_firmware, Thinkpad_x395_firmware, Thinkpad_yoga_11e_3rd_gen_firmware, Thinkpad_yoga_11e_4th_gen_firmware, Thinkpad_yoga_11e_5th_gen_firmware, Thinkpad_yoga_11e_\(20dx\)_firmware, Thinkpad_yoga_260_firmware, Thinkpad_yoga_370_firmware, V110\-14ast_firmware, V110\-14ikb_firmware, V110\-15ast_firmware, V130\-15igm_firmware, V130\-15ikb_firmware, V310\-15igm_firmware, V330\-15igm_firmware, V330\-15ikb_firmware, V330\-15isk_firmware, V340\-Iil_firmware, V340\-Iml_firmware, V540s\-13_firmware, V720\-12_firmware, V730\-13ikb_firmware, V730\-13isk_firmware, V730\-15ikb_firmware, Wei5\-15ikb_firmware, Xiaoxin_14\-Ast_qc_2019_firmware, Xx\-14api_qc_2019_firmware, Yoga_s730\-13iwl_firmware, Yoga_s940\-14iwl_firmware
|
6.7
|
|
|
|
2020-06-09
|
CVE-2020-8320
|
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
|
Thinkpad_11e_firmware, Thinkpad_11e_yoga_gen_6_firmware, Thinkpad_13_2nd_gen_firmware, Thinkpad_13_firmware, Thinkpad_a275_firmware, Thinkpad_a285_firmware, Thinkpad_a475_firmware, Thinkpad_a485_firmware, Thinkpad_e14_firmware, Thinkpad_e15_firmware, Thinkpad_e455_firmware, Thinkpad_e460_firmware, Thinkpad_e465_firmware, Thinkpad_e470_firmware, Thinkpad_e475_firmware, Thinkpad_e480_firmware, Thinkpad_e485_firmware, Thinkpad_e490_firmware, Thinkpad_e490s_firmware, Thinkpad_e555_firmware, Thinkpad_e560_firmware, Thinkpad_e560p_firmware, Thinkpad_e565_firmware, Thinkpad_e570_firmware, Thinkpad_e575_firmware, Thinkpad_e580_firmware, Thinkpad_e585_firmware, Thinkpad_e590_firmware, Thinkpad_l13_firmware, Thinkpad_l1415_firmware, Thinkpad_l380_firmware, Thinkpad_l380_yoga_firmware, Thinkpad_l390_yoga_firmware, Thinkpad_l460_firmware, Thinkpad_l470_firmware, Thinkpad_l480_firmware, Thinkpad_l490_firmware, Thinkpad_l560_firmware, Thinkpad_l570_firmware, Thinkpad_l580_firmware, Thinkpad_l590_firmware, Thinkpad_p1_firmware, Thinkpad_p43s_firmware, Thinkpad_p50_firmware, Thinkpad_p50s_firmware, Thinkpad_p51_firmware, Thinkpad_p51s_firmware, Thinkpad_p52_firmware, Thinkpad_p52s_firmware, Thinkpad_p53_firmware, Thinkpad_p53s_firmware, Thinkpad_p70_firmware, Thinkpad_p71_firmware, Thinkpad_p72_firmware, Thinkpad_p73_firmware, Thinkpad_r14_firmware, Thinkpad_r490_firmware, Thinkpad_r590_firmware, Thinkpad_s1_3rd_firmware, Thinkpad_s1_firmware, Thinkpad_s2_yoga_3rd_gen_firmware, Thinkpad_s2_yoga_4th_gen_firmware, Thinkpad_s3_3rd_gen_firmware, Thinkpad_s3_firmware, Thinkpad_s3_gen_2_firmware, Thinkpad_s5_2nd_gen_firmware, Thinkpad_s5_firmware, Thinkpad_t25_firmware, Thinkpad_t460_firmware, Thinkpad_t460p_firmware, Thinkpad_t460s_firmware, Thinkpad_t470_firmware, Thinkpad_t470p_firmware, Thinkpad_t470s_firmware, Thinkpad_t480_firmware, Thinkpad_t480s_firmware, Thinkpad_t490_firmware, Thinkpad_t490s_firmware, Thinkpad_t495_firmware, Thinkpad_t495s_firmware, Thinkpad_t560_firmware, Thinkpad_t570_firmware, Thinkpad_t580_firmware, Thinkpad_t590_firmware, Thinkpad_x1_carbon_firmware, Thinkpad_x1_extreme_firmware, Thinkpad_x1_tablet_firmware, Thinkpad_x1_yoga_firmware, Thinkpad_x260_firmware, Thinkpad_x270_firmware, Thinkpad_x280_firmware, Thinkpad_x380_yoga_firmware, Thinkpad_x390_firmware, Thinkpad_x390_yoga_firmware, Thinkpad_x395_firmware, Thinkpad_yoga_11e_3rd_gen_firmware, Thinkpad_yoga_11e_4th_gen_firmware, Thinkpad_yoga_11e_5th_gen_firmware, Thinkpad_yoga_260_firmware, Thinkpad_yoga_370_firmware
|
6.8
|
|
|
|
2020-06-09
|
CVE-2020-8334
|
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access.
|
Thinkpad_a275_firmware, Thinkpad_a285_firmware, Thinkpad_a475_firmware, Thinkpad_a485_firmware, Thinkpad_t495_firmware, Thinkpad_t495s_firmware, Thinkpad_x395_firmware
|
6.8
|
|
|
|
2020-09-01
|
CVE-2020-8335
|
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.
|
Thinkpad_a275_firmware, Thinkpad_a285_firmware, Thinkpad_a475_firmware, Thinkpad_a485_firmware, Thinkpad_t495_drift_firmware, Thinkpad_t495s_jazz_firmware, Thinkpad_x1_carbon_\(20bx\)_firmware, Thinkpad_x395_firmware
|
6.8
|
|
|
|
2022-12-26
|
CVE-2019-19705
|
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
|
Aio300\-23isu_firmware, Aio310\-20iap_firmware, Aio510\-22ish_firmware, Aio510\-23ish_firmware, Aio520\-22ikl_firmware, Aio520\-22iku_firmware, Aio520\-24ikl_firmware, Aio520\-24iku_firmware, Aio520\-27ikl_firmware, Aio720\-24ikb_firmware, Aio_910\-27ish_firmware, Aio_y910\-27ish_firmware, Ideacentre_300s\-11ish_firmware, Ideacentre_310\-15asr_firmware, Ideacentre_310\-15iap_firmware, Ideacentre_310a\-15iap_firmware, Ideacentre_310s\-08iap_firmware, Ideacentre_510\-15abr_firmware, Ideacentre_510\-15ikl_firmware, Ideacentre_510s\-08ikl_firmware, Ideacentre_510s\-08ish_firmware, Ideacentre_520s\-23iku_firmware, Ideacentre_610s\-02ish_firmware, Ideacentre_620s\-03ikl_firmware, Ideacentre_700_firmware, Ideacentre_720\-18asr_firmware, Legion_y520t_z370_firmware, Legion_y720_tower_firmware, Legion_y720t_amd_firmware, Legion_y920_tower_firmware, Lenovo_v320\-15iap_firmware, Qt_a7400_firmware, Sydney_e3_h110_firmware, Thinkcentre_e74s_firmware, Thinkcentre_e74z_firmware, Thinkcentre_e95z_firmware, Thinkcentre_m6600_firmware, Thinkcentre_m6600q_firmware, Thinkcentre_m6600t\/s_firmware, Thinkcentre_m700q_firmware, Thinkcentre_m700t\/s_firmware, Thinkcentre_m700z_firmware, Thinkcentre_m710e_firmware, Thinkcentre_m710q_firmware, Thinkcentre_m710t\/s_firmware, Thinkcentre_m715q_firmware, Thinkcentre_m715t\/s_firmware, Thinkcentre_m7300z_firmware, Thinkcentre_m800_firmware, Thinkcentre_m800z_firmware, Thinkcentre_m810z_firmware, Thinkcentre_m818z_firmware, Thinkcentre_m8300z_firmware, Thinkcentre_m8350z_firmware, Thinkcentre_m8600t\/s_firmware, Thinkcentre_m900_firmware, Thinkcentre_m900z_firmware, Thinkcentre_m910_t\/s_firmware, Thinkcentre_m910q_firmware, Thinkcentre_m910x_firmware, Thinkcentre_m910z_firmware, Thinkcentre_m9500z_firmware, Thinkcentre_m9550z_firmware, Thinkcentre_x1_aio_firmware, Thinkpad_13_firmware, Thinkpad_a275_firmware, Thinkpad_a475_firmware, Thinkpad_l13_yoga_firmware, Thinkpad_l380_firmware, Thinkpad_l380_yoga_firmware, Thinkpad_l390_yoga_firmware, Thinkpad_l450_firmware, Thinkpad_l460_firmware, Thinkpad_l470_firmware, Thinkpad_l480_firmware, Thinkpad_l560_firmware, Thinkpad_l570_firmware, Thinkpad_l580_firmware, Thinkpad_p50_firmware, Thinkpad_p50s_firmware, Thinkpad_p51_firmware, Thinkpad_p51s_firmware, Thinkpad_p52s_firmware, Thinkpad_p70_firmware, Thinkpad_p71_firmware, Thinkpad_s2_yoga_3rd_gen_firmware, Thinkpad_s2_yoga_4th_gen_firmware, Thinkpad_s3_3rd_gen_firmware, Thinkpad_t25_firmware, Thinkpad_t450_firmware, Thinkpad_t450s_firmware, Thinkpad_t460_firmware, Thinkpad_t460p_firmware, Thinkpad_t460s_firmware, Thinkpad_t470_firmware, Thinkpad_t470p_firmware, Thinkpad_t470s_firmware, Thinkpad_t480_firmware, Thinkpad_t480s_firmware, Thinkpad_t560_firmware, Thinkpad_t570_firmware, Thinkpad_t580_firmware, Thinkpad_x1_carbon_firmware, Thinkpad_x1_tablet_firmware, Thinkpad_x1_yoga_firmware, Thinkpad_x250_firmware, Thinkpad_x260_firmware, Thinkpad_x270_firmware, Thinkpad_x280_firmware, Thinkpad_yoga_11e_3rd_gen_firmware, Thinkpad_yoga_11e_4th_gen_firmware, Thinkserver_ts140_firmware, Thinkserver_ts150_firmware, Thinkserver_ts240_firmware, Thinkserver_ts250_firmware, Thinkserver_ts450_firmware, Thinkserver_ts550_firmware, Thinkstation_p310_firmware, Thinkstation_p318_firmware, Thinkstation_p320_firmware, Thinkstation_p320_tiny_firmware, Thinkstation_p330_firmware, Thinkstation_p330_tiny_firmware, V310z\(Yt_s3150\)_firmware, V410z\(Yt_s4250\)_firmware, V510z_\(Yt_s5250\)_firmware, Yangtian_afh110_firmware, Yangtian_afq150_firmware, Yangtian_mc_h110_firmware, Yangtian_mc_h110_pci_firmware, Yangtian_me\/we_h110_firmware, Yangtian_mf\/wf_h110_pci_firmware, Yangtian_s4150_firmware, Yangtian_tc\/wc_h110_pci_firmware, Yangtian_ytm6900e\-00_firmware, Yta8900f_firmware
|
7.8
|
|
|
|
2019-08-29
|
CVE-2019-10724
|
There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU...
|
100e_2nd_gen_firmware, 300e_2nd_gen_firmware, 330\-14ikbr_firmware, 330\-15ikbr_firmware, 330\-15ikbr_touch_firmware, 330\-17ikbr_firmware, 720s\-15ikb_firmware, 720s_touch\-15ikb_firmware, Aio310\-20iap_firmware, Aio510\-22ish_firmware, Aio510\-23ish_firmware, Aio520\-22ikl_firmware, Aio520\-22iku_firmware, Aio520\-24ikl_firmware, Aio520\-24iku_firmware, Aio520\-27ikl_firmware, Aio720\-24ikb_firmware, B330\-15ikbr_firmware, E43\-80_firmware, E53\-80_firmware, Flex_5\-1470\(R\)_firmware, Flex_5\-1570\(R\)_firmware, Ideacentre_520s\-23iku_firmware, K42\-80_firmware, K43c\-80_firmware, Legion_y520t_z370_firmware, Miix_520\-12ikb_firmware, Miix_525\-12ikb_firmware, Thinkcentre_m700z_firmware, Thinkcentre_m800z_firmware, Thinkcentre_m810z_firmware, Thinkcentre_m818z_firmware, Thinkcentre_m900z_firmware, Thinkcentre_m910z_firmware, Thinkpad_11e_firmware, Thinkpad_11e_yoga_firmware, Thinkpad_13_firmware, Thinkpad_a275_firmware, Thinkpad_a475_firmware, Thinkpad_e460_firmware, Thinkpad_e465_firmware, Thinkpad_e470_firmware, Thinkpad_e475_firmware, Thinkpad_e480_firmware, Thinkpad_e485_firmware, Thinkpad_e560_firmware, Thinkpad_e560p_firmware, Thinkpad_e565_firmware, Thinkpad_e570_firmware, Thinkpad_e575_firmware, Thinkpad_e580_firmware, Thinkpad_e585_firmware, Thinkpad_l380_firmware, Thinkpad_l380_yoga_firmware, Thinkpad_l460_firmware, Thinkpad_l470_firmware, Thinkpad_l480_firmware, Thinkpad_l560_firmware, Thinkpad_l570_firmware, Thinkpad_l580_firmware, Thinkpad_p40_firmware, Thinkpad_p50_firmware, Thinkpad_p50s_firmware, Thinkpad_p51s_firmware, Thinkpad_p52s_firmware, Thinkpad_p70_firmware, Thinkpad_s1_3rd_firmware, Thinkpad_s3\-S440_firmware, Thinkpad_s3_yoga_14_firmware, Thinkpad_s5_firmware, Thinkpad_t25_firmware, Thinkpad_t460_firmware, Thinkpad_t460p_firmware, Thinkpad_t460s_firmware, Thinkpad_t470_firmware, Thinkpad_t470p_firmware, Thinkpad_t470s_firmware, Thinkpad_t480_firmware, Thinkpad_t480s_firmware, Thinkpad_t560_firmware, Thinkpad_t570_firmware, Thinkpad_t580_firmware, Thinkpad_x1_carbon_firmware, Thinkpad_x1_tablet_firmware, Thinkpad_x1_yoga_3rd_firmware, Thinkpad_x1_yoga_firmware, Thinkpad_x260_firmware, Thinkpad_x270_firmware, Thinkpad_x280_firmware, Thinkpad_x380_yoga_firmware, Thinkpad_yoga_260_firmware, Thinkpad_yoga_370_firmware, Thinkpad_yoga_s1_firmware, V330\-14ikb_firmware, V330\-14isk_firmware, V330\-15ikb_firmware, V330\-15isk_firmware, V410z\(Yt_s4250\)_firmware, V720\-14_firmware, V730\-15ikb_firmware, Yoga_14_firmware, Yoga_520\-14ikbr_firmware, Yoga_720\-12ikb_firmware, Yoga_730\-13ikb_firmware, Yoga_730\-15ikb_firmware, Yoga_book_c930_firmware, Yoga_c930\-13ikb_firmware, Yoga_c930\-13ikb_glass_firmware
|
6.5
|
|
|