Thinkpad Bios
Approved changes feed: RSS · Atom
cpe:2.3:a:lenovo:thinkpad_bios:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Thinkpad Bios (c2b4ea04-b02d-53d7-b4d9-04eace3c8921) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5078 |
vulnerable | 2026-06-08 06:19:41.379222 |
Details available
MEDIUM (6.7)
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.
Published: 2023-11-08T22:02:49.076Z
Updated: 2024-09-16T14:52:18.065Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4575 |
vulnerable | 2026-06-08 05:51:59.885877 |
Details available
MEDIUM (6.7)
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.
Published: 2023-10-30T14:42:29.795Z
Updated: 2024-08-03T01:41:45.637Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4574 |
vulnerable | 2026-06-08 05:51:59.797185 |
Details available
MEDIUM (6.7)
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2023-10-30T14:36:23.273Z
Updated: 2024-09-09T16:51:57.365Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48189 |
vulnerable | 2026-06-08 05:50:41.463625 |
Details available
MEDIUM (6.7)
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2023-10-30T14:39:23.160Z
Updated: 2024-09-09T15:02:40.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1108 |
vulnerable | 2026-06-08 05:39:12.227721 |
Details available
MEDIUM (6.7)
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2022-04-22T20:30:51.000Z
Updated: 2024-08-02T23:55:24.265Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1107 |
vulnerable | 2026-06-08 05:39:12.175815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3843 |
vulnerable | 2026-06-08 05:33:54.418549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3718 |
vulnerable | 2026-06-08 05:33:53.779926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3599 |
vulnerable | 2026-06-08 05:33:52.916750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3452 |
vulnerable | 2026-06-08 05:33:52.224496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.