Known vulnerabilities in IdeaPad Flex 5 14ABR8

Vendor: Lenovo
Software: IdeaPad Flex 5 14ABR8
Software CPE: cpe:2.3:h:lenovo:ideapad_flex_5_14abr8:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 15
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IdeaPad Flex 5 14ABR8 IdeaPad Flex 5 14ABR8 is affected by 15 known vulnerabilities: 1 high, 2 medium, 12 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113731 - Uncaught Exception
CVE-2025-3770		 CWE-248 Low
No
No
 - 07.08.2025 SB2025080722
SB20250908112
SB2025092259
and 9 more
#VU112557 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36349		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112556 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36348		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU111030 - Out-of-bounds read
CVE-2025-2884		 CWE-125 Low
No
No
 - 11.06.2025 SB2025061103
SB2025061303
SB2025072845
and 4 more
#VU109411 - Improper Access Control
CVE-2025-20100		 CWE-284 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109410 - Insufficient Control Flow Management
CVE-2025-20004		 CWE-691 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109409 - Improper restriction of software interfaces to hardware features
CVE-2024-48869		 CWE-1256 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 - 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 - 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 - 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more
#VU85579 - Missing release of memory after effective lifetime
CVE-2023-4969		 CWE-401 Low
No
No
 - 18.01.2024 SB2024011844
SB2024011851
SB2024020206
and 2 more
#VU68896 - Memory corruption
CVE-2022-3786		 CWE-119 Medium
Available
No
 - 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 44 more
#VU68895 - Memory corruption
CVE-2022-3602		 CWE-119 High
Available
No
 - 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more