Known vulnerabilities in ThinkPad X1 Carbon 8th Gen - 20U9 - page 4

Vendor: Lenovo
Software: ThinkPad X1 Carbon 8th Gen - 20U9
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_carbon_8th_gen_-_20u9:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 89
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Carbon 8th Gen - 20U9 ThinkPad X1 Carbon 8th Gen - 20U9 is affected by 89 known vulnerabilities: 17 medium, 72 low Critical High Medium Low

Vulnerabilities (89)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109235 - Improper Access Control
CVE-2024-43101		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109234 - Out-of-bounds read
CVE-2024-31150		 CWE-125 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109233 - Improper Access Control
CVE-2024-39758		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109232 - Out-of-bounds write
CVE-2024-29222		 CWE-787 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109231 - Incorrect Default Permissions
CVE-2024-28954		 CWE-276 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109230 - Untrusted Search Path
CVE-2024-46895		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109229 - Untrusted Search Path
CVE-2024-47800		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109228 - Improper Access Control
CVE-2024-45371		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109227 - Memory corruption
CVE-2024-36292		 CWE-119 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109226 - Improper Access Control
CVE-2024-45333		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109222 - Untrusted Search Path
CVE-2025-21099		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109221 - Improper Access Control
CVE-2025-20052		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109220 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-20003		 CWE-59 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109186 - Use After Free
CVE-2025-20062		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109185 - Out-of-bounds read
CVE-2025-20026		 CWE-125 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109184 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-20039		 CWE-362 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109183 - Use After Free
CVE-2025-20006		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109180 - Stack-based buffer overflow
CVE-2025-20618		 CWE-121 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109179 - Improper input validation
CVE-2025-20032		 CWE-20 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109176 - Use After Free
CVE-2025-20046		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577


Showing elements 61 - 80 out of 89