Vulnerabilities > Lenovo > Ideacentre 720 18Apr Firmware > m25kt61a
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-05 | CVE-2022-48181 | Out-of-bounds Write vulnerability in Lenovo products An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code. | 7.8 |
| 2023-06-05 | CVE-2022-48188 | Out-of-bounds Write vulnerability in Lenovo products A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code. | 7.8 |
| 2023-01-30 | CVE-2022-40137 | Classic Buffer Overflow vulnerability in Lenovo products A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code. | 6.7 |