GCVE - cpe:2.3:o:lenovo:thinkpad_l390_yoga_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkpad_l390_yoga_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkpad L390 Yoga Firmware (`82e7143e-5423-5ae7-8860-3d4f0703509c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-3843`	vulnerable	2026-06-08 05:33:54.419556	Details available MEDIUM (6.7) A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Published: 2021-11-12T22:05:56.000Z Updated: 2024-08-03T17:09:09.580Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-72619	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3786`	vulnerable	2026-06-08 05:33:54.018010	Details available MEDIUM (4.4) A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range. Published: 2021-11-12T22:05:41.000Z Updated: 2024-08-03T17:09:08.738Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-67440	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3718`	vulnerable	2026-06-08 05:33:53.799170	Details available MEDIUM (4.3) A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS. Published: 2021-11-12T22:05:34.000Z Updated: 2024-08-03T17:01:08.300Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-72619	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3599`	vulnerable	2026-06-08 05:33:53.035585	Details available MEDIUM (6.7) A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Published: 2021-11-12T22:05:33.000Z Updated: 2024-08-03T17:01:07.491Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-67440	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8336`	vulnerable	2026-06-08 05:27:16.257907	Details available MEDIUM (6.4) Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash. Published: 2020-06-09T19:50:37.711Z Updated: 2024-09-16T19:56:08.433Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-30042	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8323`	vulnerable	2026-06-08 05:27:16.080291	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8320`	vulnerable	2026-06-08 05:27:15.657286	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19705`	vulnerable	2026-06-08 05:13:23.429080	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.