Known vulnerabilities in ThinkPad T490s 20NX - page 3

Vendor: Lenovo
Software: ThinkPad T490s 20NX
Software CPE: cpe:2.3:h:lenovo:thinkpad_t490s_20nx:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 68
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad T490s 20NX ThinkPad T490s 20NX is affected by 68 known vulnerabilities: 17 medium, 51 low Critical High Medium Low

Vulnerabilities (68)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109225 - Improper input validation
CVE-2025-20031		 CWE-20 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109224 - NULL Pointer Dereference
CVE-2025-20071		 CWE-476 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109223 - Untrusted Search Path
CVE-2025-20041		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109222 - Untrusted Search Path
CVE-2025-21099		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109221 - Improper Access Control
CVE-2025-20052		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109220 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-20003		 CWE-59 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109219 - Untrusted Pointer Dereference
CVE-2025-20018		 CWE-822 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109218 - Out-of-bounds read
CVE-2025-20101		 CWE-125 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109213 - Improper Check or Handling of Exceptional Conditions
CVE-2024-28036		 CWE-703 Low
No
No
 - 15.05.2025 SB2025051555
SB2025051575
#VU109186 - Use After Free
CVE-2025-20062		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109185 - Out-of-bounds read
CVE-2025-20026		 CWE-125 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109184 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-20039		 CWE-362 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109183 - Use After Free
CVE-2025-20006		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109180 - Stack-based buffer overflow
CVE-2025-20618		 CWE-121 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109179 - Improper input validation
CVE-2025-20032		 CWE-20 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109176 - Use After Free
CVE-2025-20046		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU104134 - Stack-based buffer overflow
CVE-2024-41166		 CWE-121 Low
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104075 - Improper Access Control
CVE-2024-30211		 CWE-284 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104071 - Improper Initialization
CVE-2024-26021		 CWE-665 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104063 - Improper input validation
CVE-2024-38307		 CWE-20 Medium
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076


Showing elements 41 - 60 out of 68