Known vulnerabilities in ThinkPad X1 Carbon 9th Gen 20XW - page 5

Vendor: Lenovo
Software: ThinkPad X1 Carbon 9th Gen 20XW
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_carbon_9th_gen_20xw:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 105
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Carbon 9th Gen 20XW ThinkPad X1 Carbon 9th Gen 20XW is affected by 105 known vulnerabilities: 18 medium, 87 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109235 - Improper Access Control
CVE-2024-43101		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109234 - Out-of-bounds read
CVE-2024-31150		 CWE-125 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109233 - Improper Access Control
CVE-2024-39758		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109232 - Out-of-bounds write
CVE-2024-29222		 CWE-787 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109231 - Incorrect Default Permissions
CVE-2024-28954		 CWE-276 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109230 - Untrusted Search Path
CVE-2024-46895		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109229 - Untrusted Search Path
CVE-2024-47800		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109228 - Improper Access Control
CVE-2024-45371		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109213 - Improper Check or Handling of Exceptional Conditions
CVE-2024-28036		 CWE-703 Low
No
No
 - 15.05.2025 SB2025051555
SB2025051575
#VU109162 - Unquoted Search Path or Element
CVE-2024-31073		 CWE-428 Low
No
No
 - 14.05.2025 SB2025051419
SB2025051524
#VU104104 - Improper Access Control
CVE-2021-37577		 CWE-284 Low
No
No
 - 20.02.2025 SB2025022016
SB2025051556
#VU96686 - Buffer over-read
CVE-2024-33051		 CWE-126 Medium
No
No
 - 02.09.2024 SB2024090224
SB2024090382
SB2025051545
#VU83976 - Improper input validation
CVE-2023-5058		 CWE-20 Low
No
No
 - 07.12.2023 SB2023120719
SB2023120689
#VU83973 - Improper input validation
CVE-2023-40238		 CWE-20 Low
No
No
 - 07.12.2023 SB2023120718
SB2023120689
#VU83971 - Permissions, Privileges, and Access Controls
CVE-2023-39539		 CWE-264 Low
No
No
 - 07.12.2023 SB2023120714
SB2024082035
SB2023120689
#VU83970 - Permissions, Privileges, and Access Controls
CVE-2023-39538		 CWE-264 Low
No
No
 - 07.12.2023 SB2023120714
SB2023120689
#VU83462 - NULL Pointer Dereference
CVE-2022-42879		 CWE-476 Low
No
No
 - 23.11.2023 SB20231123116
SB2023120126
SB2023122722
and 1 more
#VU83461 - Out-of-bounds write
CVE-2023-25952		 CWE-787 Low
No
No
 - 23.11.2023 SB20231123116
SB2023120126
SB2023122722
and 1 more
#VU83460 - Incorrect Default Permissions
CVE-2023-27305		 CWE-276 Low
No
No
 - 23.11.2023 SB20231123116
SB2023120126
SB2023122722
and 1 more
#VU83459 - Unquoted Search Path or Element
CVE-2023-29165		 CWE-428 Low
No
No
 - 23.11.2023 SB20231123116
SB2023120126
SB2023122722
and 1 more


Showing elements 81 - 100 out of 105