GCVE - cpe:2.3:h:lenovo:thinkpad_e585:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:lenovo:thinkpad_e585:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkpad E585 (`53098b99-b3ba-5b1a-99c1-28881007080a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-8337`	not_vulnerable	2026-06-08 05:27:16.303475	Details available An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code. Published: 2020-06-09T19:50:38.150Z Updated: 2024-09-16T18:38:25.028Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/len-30707 https://www.synaptics.com/sites/default/files/audio-driver-security-brief-2020-06-09.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8323`	not_vulnerable	2026-06-08 05:27:16.077111	Details available MEDIUM (6.4) A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. Published: 2020-06-09T19:50:36.286Z Updated: 2024-09-16T23:55:41.021Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-30042	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8320`	not_vulnerable	2026-06-08 05:27:15.639384	Details available MEDIUM (6.4) An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. Published: 2020-06-09T19:50:34.958Z Updated: 2024-09-16T17:33:07.639Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-30042	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18619`	not_vulnerable	2026-06-08 05:13:11.899025	Details available Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid pointers. Published: 2020-07-22T13:15:53.000Z Updated: 2024-08-05T01:54:14.487Z Open on db.gcve.eu Reference links https://www.synaptics.com/company/blog/ https://www.synaptics.com/sites/default/files/fingerprint-driver-SGX-security-brief-2020-07-14.pdf https://www.syssec.wiwi.uni-due.de/en/research/research-projects/analysis-of-tee-software/ https://support.lenovo.com/us/en/product_security/LEN-31372 https://support.hp.com/hk-en/document/c06696568	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18618`	not_vulnerable	2026-06-08 05:13:11.721548	Details available Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacker to compromise the confidentiality of sensor data via injection of an unverified partition table. Published: 2020-07-22T13:21:29.000Z Updated: 2024-08-05T01:54:14.531Z Open on db.gcve.eu Reference links https://www.synaptics.com/company/blog/ https://support.lenovo.com/us/en/product_security/LEN-31372 https://www.synaptics.com/sites/default/files/fingerprint-sensor-VFS7500-security-brief-2020-07-14.pdf https://support.hp.com/us-en/document/c06696474	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10724`	not_vulnerable	2026-06-08 05:12:25.116659	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.