Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:x1_carbon_13th_gen_(type_21nx,_21ny)_laptops_(thinkpad)_bios:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductX1 Carbon 13Th Gen (Type 21Nx, 21Ny) Laptops (Thinkpad) Bios (455d2fd1-57cb-557f-92a6-b8c51787154a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10238 vulnerable 2026-07-28 23:14:04.037636 Details available
MEDIUM (6.7)
During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some ThinkPad products could allow a privileged local user to execute code in System Management Mode (SMM).
Published: 2026-06-10T14:11:21.336Z
Updated: 2026-06-11T03:55:27.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10237 vulnerable 2026-07-28 23:14:03.519425 Details available
MEDIUM (6.7)
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
Published: 2026-06-10T14:10:56.181Z
Updated: 2026-06-11T03:55:29.206Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.