Vulnerabilities > Lenovo > Thinkpad T470S Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2022-12-26 CVE-2019-19705 Unquoted Search Path or Element vulnerability in Lenovo products
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
local
low complexity
lenovo CWE-428
7.8
2019-01-24 CVE-2018-16098 Unquoted Search Path or Element vulnerability in Lenovo products
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.
local
low complexity
lenovo CWE-428
7.8