Vulnerabilities > Lenovo > Flex 5 15Alc05 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-08-17 CVE-2023-4028 Classic Buffer Overflow vulnerability in Lenovo products
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
local
low complexity
lenovo CWE-120
6.7
2023-01-26 CVE-2022-1892 Classic Buffer Overflow vulnerability in Lenovo products
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
local
low complexity
lenovo CWE-120
7.8