Vulnerabilities > Lenovo > Legion Y920 Tower Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-12-26 CVE-2019-19705 Unquoted Search Path or Element vulnerability in Lenovo products
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
local
low complexity
lenovo CWE-428
7.8
7.8
2019-04-10 CVE-2019-6156 Improper Locking vulnerability in Lenovo products
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash.
local
low complexity
lenovo CWE-667
3.3
3.3