Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (6.7)0.19%—Lenovo 13W Yoga FirmwareLenovo 13W Yoga GEN 2 FirmwareLenovo Ideapad 1-11ada05 FirmwareLenovo Ideapad 1-11igl05 Firmware+2517/8/202317/6/2026
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
ModificadaAlta (7.8)0.34%—Lenovo 100e 2ND GEN FirmwareLenovo 100w GEN 3 FirmwareLenovo 13W Yoga FirmwareLenovo 14W GEN 2 Firmware+6626/1/202317/6/2026
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
ModificadaMedia (6.8)0.24%—Lenovo Ideapad 1-11ada05 FirmwareLenovo Ideapad 1-14ada05 FirmwareLenovo V130-15ikb FirmwareLenovo 100e 2ND GEN Firmware+1716/7/202117/6/2026
A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.
ModificadaMedia (4.6)0.24%—Lenovo Thinkpad Helix FirmwareLenovo Thinkpad T550 FirmwareLenovo Thinkpad W550s FirmwareLenovo Thinkpad X1 Carbon 3RD GEN Firmware+1716/7/202117/6/2026
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.