Lenovo 100e 2nd Gen Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo 100e 2nd Gen Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-1892 — CVSS 6.7 (medium): A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to…
• CVE-2019-10724 — CVSS 6.5 (medium): There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are…
• CVE-2021-3614 — CVSS 6.4 (medium): A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under…