Vulnerabilities

TI-2025-03946 CVE-2025-4426 · GHSA-g6vv-g2rm-qrv7

SetupAutomationSmm : SMRAM memory contents leak / information disclosure vulnerability in SMM module

LOW 26

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00223 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-200

TI-2025-03945 CVE-2025-4425 · GHSA-8mrm-vc83-24x3

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0019 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-121

TI-2025-03944 CVE-2025-4424 · GHSA-w6pc-r33w-5f59

LOW 26

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00174 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-20

TI-2025-03943 CVE-2025-4423 · GHSA-84fx-mhqp-q4r7

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0019 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-119

TI-2025-03942 CVE-2025-4422 · GHSA-mpfc-4gcg-9qr5

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00229 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-787

TI-2025-03941 CVE-2025-4421 · GHSA-39h4-c5qq-2w56

LOW 37

The vulnerability was identified in the code developed specifically for Lenovo.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00244 Published 2025-07-30 Fixed in L05.05.40.011803.172079 CWE-787