High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-05	CVE-2022-48181	Out-of-bounds Write vulnerability in Lenovo products An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code. local low complexity lenovo CWE-787	7.8
2019-11-12	CVE-2019-6188	Unspecified vulnerability in Lenovo products The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access. network low complexity lenovo	7.5