CVSS: 7.8EPSS: 0%CPEs: 142EXPL: 0CVE-2022-1892
https://notcve.org/view.php?id=CVE-2022-1892
23 Jan 2023 — A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. • https://support.lenovo.com/us/en/product_security/LEN-91369 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-122: Heap-based Buffer Overflow •
CVSS: 6.8EPSS: 0%CPEs: 44EXPL: 0CVE-2021-3614
https://notcve.org/view.php?id=CVE-2021-3614
16 Jul 2021 — A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage. Se ha reportado una vulnerabilidad en algunos sistemas de portátiles Lenovo que podría permitir a un atacante con acceso físico elevar los privilegios en determinadas condiciones durante una actualización de la BIOS llevada a cabo por Lenovo Vantage • https://support.lenovo.com/us/en/product_security/LEN-65529 • CWE-636: Not Failing Securely ('Failing Open') •
CVSS: 6.8EPSS: 0%CPEs: 220EXPL: 0CVE-2019-10724
https://notcve.org/view.php?id=CVE-2019-10724
28 Aug 2019 — There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU 6.0.1.8642, Thi... • https://lenovomobilesupport.lenovo.com/us/en/product_security/home •