m16kt40a

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-30	CVE-2022-40135	Out-of-bounds Read vulnerability in Lenovo products An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. local low complexity lenovo CWE-125	4.4
2023-01-30	CVE-2022-40136	Out-of-bounds Read vulnerability in Lenovo products An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. local low complexity lenovo CWE-125	4.4
2021-11-12	CVE-2021-3519	Improper Authentication vulnerability in Lenovo products A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes. local lenovo CWE-287	6.9