Known vulnerabilities in ThinkPad X1 Extreme 3rd Gen 20TK - page 5

Vendor: Lenovo
Software: ThinkPad X1 Extreme 3rd Gen 20TK
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_extreme_3rd_gen_20tk:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 108
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Extreme 3rd Gen 20TK ThinkPad X1 Extreme 3rd Gen 20TK is affected by 108 known vulnerabilities: 18 medium, 90 low Critical High Medium Low

Vulnerabilities (108)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109235 - Improper Access Control
CVE-2024-43101		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109234 - Out-of-bounds read
CVE-2024-31150		 CWE-125 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109233 - Improper Access Control
CVE-2024-39758		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109232 - Out-of-bounds write
CVE-2024-29222		 CWE-787 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109231 - Incorrect Default Permissions
CVE-2024-28954		 CWE-276 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109230 - Untrusted Search Path
CVE-2024-46895		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109229 - Untrusted Search Path
CVE-2024-47800		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109228 - Improper Access Control
CVE-2024-45371		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
SB2025051950
#VU109227 - Memory corruption
CVE-2024-36292		 CWE-119 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109226 - Improper Access Control
CVE-2024-45333		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051571
SB2025051576
#VU109221 - Improper Access Control
CVE-2025-20052		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109220 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-20003		 CWE-59 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109186 - Use After Free
CVE-2025-20062		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109185 - Out-of-bounds read
CVE-2025-20026		 CWE-125 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109184 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-20039		 CWE-362 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109183 - Use After Free
CVE-2025-20006		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109180 - Stack-based buffer overflow
CVE-2025-20618		 CWE-121 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109179 - Improper input validation
CVE-2025-20032		 CWE-20 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109176 - Use After Free
CVE-2025-20046		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU104104 - Improper Access Control
CVE-2021-37577		 CWE-284 Low
No
No
 - 20.02.2025 SB2025022016
SB2025051556


Showing elements 81 - 100 out of 108