Known vulnerabilities in ThinkPad X1 Carbon 10th Gen 21CB - page 5

Vendor: Lenovo
Software: ThinkPad X1 Carbon 10th Gen 21CB
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_carbon_10th_gen_21cb:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 107
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Carbon 10th Gen 21CB ThinkPad X1 Carbon 10th Gen 21CB is affected by 107 known vulnerabilities: 17 medium, 90 low Critical High Medium Low

Vulnerabilities (107)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109235 - Improper Access Control
CVE-2024-43101		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109234 - Out-of-bounds read
CVE-2024-31150		 CWE-125 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109233 - Improper Access Control
CVE-2024-39758		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109232 - Out-of-bounds write
CVE-2024-29222		 CWE-787 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109231 - Incorrect Default Permissions
CVE-2024-28954		 CWE-276 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109230 - Untrusted Search Path
CVE-2024-46895		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109229 - Untrusted Search Path
CVE-2024-47800		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109228 - Improper Access Control
CVE-2024-45371		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109227 - Memory corruption
CVE-2024-36292		 CWE-119 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109226 - Improper Access Control
CVE-2024-45333		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109213 - Improper Check or Handling of Exceptional Conditions
CVE-2024-28036		 CWE-703 Low
No
No
 - 15.05.2025 SB2025051555
SB2025051575
#VU109184 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-20039		 CWE-362 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109179 - Improper input validation
CVE-2025-20032		 CWE-20 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109162 - Unquoted Search Path or Element
CVE-2024-31073		 CWE-428 Low
No
No
 - 14.05.2025 SB2025051419
SB2025051524
#VU83976 - Improper input validation
CVE-2023-5058		 CWE-20 Low
No
No
 - 07.12.2023 SB2023120719
SB2023120689
#VU83973 - Improper input validation
CVE-2023-40238		 CWE-20 Low
No
No
 - 07.12.2023 SB2023120718
SB2023120689
#VU83971 - Permissions, Privileges, and Access Controls
CVE-2023-39539		 CWE-264 Low
No
No
 - 07.12.2023 SB2023120714
SB2024082035
SB2023120689
#VU83970 - Permissions, Privileges, and Access Controls
CVE-2023-39538		 CWE-264 Low
No
No
 - 07.12.2023 SB2023120714
SB2023120689
#VU83460 - Incorrect Default Permissions
CVE-2023-27305		 CWE-276 Low
No
No
 - 23.11.2023 SB20231123116
SB2023120126
SB2023122722
and 1 more
#VU83459 - Unquoted Search Path or Element
CVE-2023-29165		 CWE-428 Low
No
No
 - 23.11.2023 SB20231123116
SB2023120126
SB2023122722
and 1 more


Showing elements 81 - 100 out of 107