Approved changes feed: RSS · Atom

cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinkpad L390 Yoga (3e7564b9-c79d-538f-a3de-88ae49231622)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40134 not_vulnerable 2026-06-08 05:48:23.262342 Details available
MEDIUM (4.4)
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Published: 2023-01-30T21:20:25.236Z
Updated: 2025-03-27T15:26:52.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3843 not_vulnerable 2026-06-08 05:33:54.419573 Details available
MEDIUM (6.7)
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2021-11-12T22:05:56.000Z
Updated: 2024-08-03T17:09:09.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3786 not_vulnerable 2026-06-08 05:33:54.018027 Details available
MEDIUM (4.4)
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
Published: 2021-11-12T22:05:41.000Z
Updated: 2024-08-03T17:09:08.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3718 not_vulnerable 2026-06-08 05:33:53.799189 Details available
MEDIUM (4.3)
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
Published: 2021-11-12T22:05:34.000Z
Updated: 2024-08-03T17:01:08.300Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3599 not_vulnerable 2026-06-08 05:33:53.035629 Details available
MEDIUM (6.7)
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2021-11-12T22:05:33.000Z
Updated: 2024-08-03T17:01:07.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3463 not_vulnerable 2026-06-08 05:33:52.364540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3462 not_vulnerable 2026-06-08 05:33:52.313820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3452 not_vulnerable 2026-06-08 05:33:52.238781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8337 not_vulnerable 2026-06-08 05:27:16.305739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8336 not_vulnerable 2026-06-08 05:27:16.258032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8323 not_vulnerable 2026-06-08 05:27:16.080308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8320 not_vulnerable 2026-06-08 05:27:15.657874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6192 not_vulnerable 2026-06-08 05:14:10.274528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6188 not_vulnerable 2026-06-08 05:14:10.020499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6172 not_vulnerable 2026-06-08 05:14:09.834525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6170 not_vulnerable 2026-06-08 05:14:09.520313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19705 not_vulnerable 2026-06-08 05:13:23.429589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.