Known vulnerabilities in BIOS Update for Windows 11 (64-bit) - Yoga 9 14IRP8

Known vulnerabilities in BIOS Update for Windows 11 (64-bit) - Yoga 9 14IRP8

Vendor: Lenovo

Software: BIOS Update for Windows 11 (64-bit) - Yoga 9 14IRP8

Software CPE: cpe:2.3:h:lenovo:bios_update_for_windows_11_64-bit_-_yoga_9_14irp8:*:*:*:*:*:*:*:*

Website: https://www.lenovo.com/

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU119817 - State Issues CVE-2025-9614	CWE-371	Low	No	No	L4CN26WW	10.12.2025	SB20251210202 SB2025122701
#VU119816 - Insufficient Technical Documentation CVE-2025-9613	CWE-1059	Low	No	No	L4CN26WW	10.12.2025	SB20251210202 SB2025122701
#VU119815 - Improper Validation of Integrity Check Value CVE-2025-9612	CWE-354	Low	No	No	L4CN26WW	10.12.2025	SB20251210202 SB2025122701
#VU119804 - Exposure of sensitive information to an unauthorized actor CVE-2024-38798	CWE-200	Low	No	No	L4CN26WW	10.12.2025	SB20251210176 SB2025122701 SB2026020648 and 2 more
#VU119030 - Exposure of Sensitive System Information to an Unauthorized Control Sphere CVE-2025-47319	CWE-497	Low	No	No	L4CN26WW	02.12.2025	SB2025120232 SB2025122701
#VU119032 - Integer overflow CVE-2025-47323	CWE-190	Low	No	No	L4CN26WW	02.12.2025	SB2025120232 SB2025122701
#VU113731 - Uncaught Exception CVE-2025-3770	CWE-248	Low	No	No	-	07.08.2025	SB2025080722 SB20250908112 SB2025092259 and 9 more
#VU95180 - Integer overflow CVE-2022-36765	CWE-190	Low	No	No	MBCN26WW	02.08.2024	SB2024080236 SB2024021453 SB2024021639 and 8 more
#VU89083 - Integer overflow CVE-2022-36763	CWE-190	Low	No	No	MBCN26WW	01.05.2024	SB2024011752 SB2024050117 SB2024021453 and 9 more
#VU87737 - Integer overflow CVE-2022-36764	CWE-190	Medium	No	No	MBCN26WW	22.03.2024	SB2024011752 SB2024032253 SB2024032254 and 11 more
#VU83976 - Improper input validation CVE-2023-5058	CWE-20	Low	No	No	L4CN22WW	07.12.2023	SB2023120719 SB2023120689
#VU83973 - Improper input validation CVE-2023-40238	CWE-20	Low	No	No	L4CN22WW	07.12.2023	SB2023120718 SB2023120689
#VU83971 - Permissions, Privileges, and Access Controls CVE-2023-39539	CWE-264	Low	No	No	L4CN22WW	07.12.2023	SB2023120714 SB2024082035 SB2023120689
#VU83970 - Permissions, Privileges, and Access Controls CVE-2023-39538	CWE-264	Low	No	No	L4CN22WW	07.12.2023	SB2023120714 SB2023120689