Known vulnerabilities in ThinkPad T14 Gen 3 21CG - page 2

Vendor: Lenovo
Software: ThinkPad T14 Gen 3 21CG
Software CPE: cpe:2.3:h:lenovo:thinkpad_t14_gen_3_21cg:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 41
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad T14 Gen 3 21CG ThinkPad T14 Gen 3 21CG is affected by 41 known vulnerabilities: 2 high, 4 medium, 35 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113352 - Incorrect Default Permissions
CVE-2025-0886		 CWE-276 Low
Available
No
 - 28.07.2025 SB2025072835
#VU112361 - Buffer over-read
CVE-2025-21446		 CWE-126 Medium
No
No
 - 07.07.2025 SB2025070749
SB2025072839
SB2025090275
#VU112363 - Buffer over-read
CVE-2025-21454		 CWE-126 Medium
No
No
 - 07.07.2025 SB2025070749
SB2025072838
SB2025090275
#VU110029 - Heap-based Buffer Overflow
CVE-2025-20672		 CWE-122 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061259
#VU110030 - NULL Pointer Dereference
CVE-2025-20673		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110032 - NULL Pointer Dereference
CVE-2025-20675		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110033 - NULL Pointer Dereference
CVE-2025-20676		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061258
#VU110034 - NULL Pointer Dereference
CVE-2025-20677		 CWE-476 Low
No
No
 - 02.06.2025 SB2025060229
SB2025061259
#VU105188 - Out-of-bounds write
CVE-2025-20646		 CWE-787 Low
No
No
 - 03.03.2025 SB2025030336
SB2025051630
#VU102346 - Out-of-bounds write
CVE-2024-20148		 CWE-787 High
No
No
 - 06.01.2025 SB2025010635
SB2025010645
SB2025072837
and 1 more
#VU99674 - Cryptographic Issues
CVE-2024-38408		 CWE-310 High
No
No
 - 04.11.2024 SB2024110464
SB2024110465
SB20250520130
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 - 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 - 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 - 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more
#VU85579 - Missing release of memory after effective lifetime
CVE-2023-4969		 CWE-401 Low
No
No
 - 18.01.2024 SB2024011844
SB2024011851
SB2024020206
and 2 more
#VU83976 - Improper input validation
CVE-2023-5058		 CWE-20 Low
No
No
 - 07.12.2023 SB2023120719
SB2023120689
#VU83973 - Improper input validation
CVE-2023-40238		 CWE-20 Low
No
No
 - 07.12.2023 SB2023120718
SB2023120689
#VU83971 - Permissions, Privileges, and Access Controls
CVE-2023-39539		 CWE-264 Low
No
No
 - 07.12.2023 SB2023120714
SB2024082035
SB2023120689
#VU83970 - Permissions, Privileges, and Access Controls
CVE-2023-39538		 CWE-264 Low
No
No
 - 07.12.2023 SB2023120714
SB2023120689
#VU81984 - Security Features
CVE-2023-5078		 CWE-254 Low
No
No
 - 13.10.2023 SB2023101308


Showing elements 21 - 40 out of 41