Lenovo Thinkpad A275 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Thinkpad A275 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2019-19705 — CVSS 7.8 (high): Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG…
• CVE-2019-18619 — CVSS 7.8 (high): Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15)…
• CVE-2019-10724 — CVSS 6.5 (medium): There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are…
• CVE-2020-8320 — CVSS 6.4 (medium): An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
• CVE-2020-8323 — CVSS 6.4 (medium): A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo…
• CVE-2020-8335 — CVSS 6.1 (medium): The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to…
• CVE-2020-8334 — CVSS 6.1 (medium): The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for…
• CVE-2019-18618 — CVSS 6.0 (medium): Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to…