Latest lenovo thinkpad x1 carbon firmware Vulnerabilities

● CVE-2019-19705

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo pr...

Lenovo Ideacentre 510-15ikl Firmware<6.0.8923.1

Lenovo Ideacentre 510-15ikl

Lenovo Ideacentre 510s-08ikl Firmware<6.0.8923.1

Lenovo Ideacentre 510s-08ikl

Lenovo Ideacentre 300s-11ish Firmware<6.0.8924.1

Lenovo Ideacentre 300s-11ish

and 268 more

● CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacke...

Synaptics Vfs75xx Firmware=5.1.5.51

Synaptics Vfs75xx Firmware=5.1.337.26

Synaptics Vfs75xx Firmware=5.1.3507.26

Synaptics Vfs75xx Firmware=5.2.320.26

Synaptics Vfs75xx Firmware=5.2.524.26

Synaptics Vfs75xx Firmware=5.2.3109.26

and 279 more

● CVE-2019-18619

Synaptics Vfs75xx Firmware=5.2.225.26

Synaptics Vfs75xx Firmware=5.2.318.26

Synaptics Vfs75xx Firmware=5.2.524.26

Synaptics Vfs75xx Firmware=5.2.3530.26

Synaptics Vfs75xx Firmware=5.3.3539.26

Synaptics Vfs75xx Firmware=5.5.3.1116

and 234 more

● CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

Lenovo Thinkpad 11e Yoga Gen 6 Firmware<2020-07-10

Lenovo Thinkpad 11e Yoga Gen 6

Lenovo Thinkpad 11e Firmware<2020-07-10

Lenovo Thinkpad 11e

Lenovo Thinkpad Yoga 11e 3rd Gen Firmware<2020-07-10

Lenovo Thinkpad Yoga 11e 3rd Gen

and 194 more

● CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.

Lenovo 330-14ast Firmware

Lenovo 330-14ast

Lenovo 330-15ast Firmware

Lenovo 330-15ast

Lenovo 330-17ast Firmware

Lenovo 330-17ast

and 338 more

● CVE-2019-6170

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.

Lenovo 510-15ikl Firmware

Lenovo 510-15ikl

Lenovo 510s-08ikl Firmware

Lenovo 510s-08ikl

Lenovo Ideacentre 300-20ish Firmware

Lenovo Ideacentre 300-20ish

and 778 more

● CVE-2018-16098

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege u...

Lenovo Synaptics Thinkpad Ultranav Driver=18.0.7.119

Microsoft Windows 7

Microsoft Windows 8.1

Lenovo Synaptics Thinkpad Ultranav Driver=19.5.19.33

Microsoft Windows 10

Lenovo Synaptics Thinkpad Ultranav Driver=19.0.17.140

and 120 more

● CVE-2018-9062

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

Lenovo E42-80 Firmware<2wcn40ww

Lenovo E42-80

Lenovo E42-80 Isk Firmware<0zcn48ww

Lenovo E42-80 Isk

Lenovo E52-80 Firmware<2wcn40ww

Lenovo E52-80

and 94 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.