Vulnerabilities > Lenovo > Thinkpad Yoga 11E

DATE CVE VULNERABILITY TITLE RISK
2019-01-24 CVE-2018-16098 Unquoted Search Path or Element vulnerability in Lenovo products
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.
local
low complexity
lenovo microsoft CWE-428
7.2
2018-07-19 CVE-2018-9062 Injection vulnerability in Lenovo products
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
local
low complexity
lenovo CWE-74
7.2
2017-11-13 CVE-2017-3767 Unspecified vulnerability in Realtek Audio Driver Firmware
A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products.
local
low complexity
realtek lenovo
7.2
2017-08-18 CVE-2017-3756 Unspecified vulnerability in Lenovo products
A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17.
local
low complexity
lenovo microsoft
7.2
2016-11-30 CVE-2016-8222 Improper Access Control vulnerability in Lenovo products
A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services.
local
lenovo CWE-284
4.7