Lenovo Thinkpad 25 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Thinkpad 25 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-18619 — CVSS 7.8 (high): Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15)…
• CVE-2021-3599 — CVSS 6.7 (medium): A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local…
• CVE-2022-4575 — CVSS 6.7 (medium): A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker…
• CVE-2019-18618 — CVSS 6.0 (medium): Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to…
• CVE-2021-3786 — CVSS 4.4 (medium): A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be…