Vulnerabilities > Lenovo > Thinkstation P330 Tiny Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-05 CVE-2022-48181 Out-of-bounds Write vulnerability in Lenovo products
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.
local
low complexity
lenovo CWE-787
7.8
2023-06-05 CVE-2022-48188 Out-of-bounds Write vulnerability in Lenovo products
A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.
local
low complexity
lenovo CWE-787
7.8
2022-12-26 CVE-2019-19705 Unquoted Search Path or Element vulnerability in Lenovo products
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
local
low complexity
lenovo CWE-428
7.8