Known vulnerabilities in ThinkPad L13 Yoga Gen 3 21BC

Vendor: Lenovo
Software: ThinkPad L13 Yoga Gen 3 21BC
Software CPE: cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_3_21bc:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad L13 Yoga Gen 3 21BC ThinkPad L13 Yoga Gen 3 21BC is affected by 30 known vulnerabilities: 1 high, 2 medium, 27 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119817 - State Issues
CVE-2025-9614		 CWE-371 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119816 - Insufficient Technical Documentation
CVE-2025-9613		 CWE-1059 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119815 - Improper Validation of Integrity Check Value
CVE-2025-9612		 CWE-354 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119804 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38798		 CWE-200 Low
No
No
 - 10.12.2025 SB20251210176
SB2025122701
SB2026020648
and 2 more
#VU119030 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-47319		 CWE-497 Low
No
No
 - 02.12.2025 SB2025120232
SB2025122701
#VU119032 - Integer overflow
CVE-2025-47323		 CWE-190 Low
No
No
 - 02.12.2025 SB2025120232
SB2025122701
#VU113356 - Permissions, Privileges, and Access Controls
CVE-2024-6364		 CWE-264 Low
No
No
 - 28.07.2025 SB2025072859
SB2025072860
#VU112557 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36349		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112556 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36348		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU112466 - Out-of-bounds read
CVE-2025-20693		 CWE-125 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072843
#VU112363 - Buffer over-read
CVE-2025-21454		 CWE-126 Medium
No
No
 - 07.07.2025 SB2025070749
SB2025072838
SB2025090275
#VU111030 - Out-of-bounds read
CVE-2025-2884		 CWE-125 Low
No
No
 - 11.06.2025 SB2025061103
SB2025061303
SB2025072845
and 4 more
#VU110030 - NULL Pointer Dereference
CVE-2025-20673		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110032 - NULL Pointer Dereference
CVE-2025-20675		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110033 - NULL Pointer Dereference
CVE-2025-20676		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU109411 - Improper Access Control
CVE-2025-20100		 CWE-284 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109410 - Insufficient Control Flow Management
CVE-2025-20004		 CWE-691 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109409 - Improper restriction of software interfaces to hardware features
CVE-2024-48869		 CWE-1256 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844


Showing elements 1 - 20 out of 30