Known vulnerabilities in ThinkPad T14 Gen 3 21CG

Vendor: Lenovo
Software: ThinkPad T14 Gen 3 21CG
Software CPE: cpe:2.3:h:lenovo:thinkpad_t14_gen_3_21cg:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 41
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad T14 Gen 3 21CG ThinkPad T14 Gen 3 21CG is affected by 41 known vulnerabilities: 2 high, 4 medium, 35 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119817 - State Issues
CVE-2025-9614		 CWE-371 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119816 - Insufficient Technical Documentation
CVE-2025-9613		 CWE-1059 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119815 - Improper Validation of Integrity Check Value
CVE-2025-9612		 CWE-354 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119804 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38798		 CWE-200 Low
No
No
 - 10.12.2025 SB20251210176
SB2025122701
SB2026020648
and 2 more
#VU119030 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-47319		 CWE-497 Low
No
No
 - 02.12.2025 SB2025120232
SB2025122701
#VU119032 - Integer overflow
CVE-2025-47323		 CWE-190 Low
No
No
 - 02.12.2025 SB2025120232
SB2025122701
#VU112557 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36349		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112556 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36348		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU112453 - Heap-based Buffer Overflow
CVE-2025-20680		 CWE-122 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072842
#VU112460 - Out-of-bounds read
CVE-2025-20687		 CWE-125 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072842
#VU112466 - Out-of-bounds read
CVE-2025-20693		 CWE-125 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072843
#VU112467 - Buffer Underwrite ('Buffer Underflow')
CVE-2025-20694		 CWE-124 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072842
#VU112468 - Buffer Underwrite ('Buffer Underflow')
CVE-2025-20695		 CWE-124 Low
No
No
 - 08.07.2025 SB2025070835
SB2025072842
#VU112362 - Buffer over-read
CVE-2025-21449		 CWE-126 Medium
No
No
 - 07.07.2025 SB2025070749
SB2025072839
SB2025090275
#VU111030 - Out-of-bounds read
CVE-2025-2884		 CWE-125 Low
No
No
 - 11.06.2025 SB2025061103
SB2025061303
SB2025072845
and 4 more
#VU109411 - Improper Access Control
CVE-2025-20100		 CWE-284 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109410 - Insufficient Control Flow Management
CVE-2025-20004		 CWE-691 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109409 - Improper restriction of software interfaces to hardware features
CVE-2024-48869		 CWE-1256 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844


Showing elements 1 - 20 out of 41