Vulnerabilities > Lenovo > Thinkpad 11E Yoga Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-04-22 CVE-2022-1107 Improper Privilege Management vulnerability in Lenovo products
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
local
low complexity
lenovo CWE-269
7.2
2019-08-29 CVE-2019-10724 Unspecified vulnerability in Lenovo products
There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege.
network
low complexity
lenovo
6.8