Known vulnerabilities in ThinkPad X1 Extreme Gen 5 21DF - page 5

Vendor: Lenovo
Software: ThinkPad X1 Extreme Gen 5 21DF
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_extreme_gen_5_21df:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 113
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Extreme Gen 5 21DF ThinkPad X1 Extreme Gen 5 21DF is affected by 113 known vulnerabilities: 21 medium, 92 low Critical High Medium Low

Vulnerabilities (113)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109225 - Improper input validation
CVE-2025-20031		 CWE-20 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109224 - NULL Pointer Dereference
CVE-2025-20071		 CWE-476 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109223 - Untrusted Search Path
CVE-2025-20041		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109222 - Untrusted Search Path
CVE-2025-21099		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109221 - Improper Access Control
CVE-2025-20052		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109220 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-20003		 CWE-59 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109219 - Untrusted Pointer Dereference
CVE-2025-20018		 CWE-822 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109218 - Out-of-bounds read
CVE-2025-20101		 CWE-125 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU104136 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2024-39271		 CWE-923 Low
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104135 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-36285		 CWE-362 Low
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104132 - Improper input validation
CVE-2024-39606		 CWE-20 Medium
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104131 - NULL Pointer Dereference
CVE-2024-39356		 CWE-476 Medium
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104130 - Use After Free
CVE-2024-41168		 CWE-416 Medium
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104075 - Improper Access Control
CVE-2024-30211		 CWE-284 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104071 - Improper Initialization
CVE-2024-26021		 CWE-665 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104063 - Improper input validation
CVE-2024-38307		 CWE-20 Medium
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU100421 - NULL Pointer Dereference
CVE-2024-28030		 CWE-476 Low
No
No
 - 13.11.2024 SB2024111308
SB2025051631
#VU100420 - Out-of-bounds read
CVE-2024-28051		 CWE-125 Low
No
No
 - 13.11.2024 SB2024111308
SB2025051631
#VU100419 - Memory corruption
CVE-2024-21808		 CWE-119 Low
No
No
 - 13.11.2024 SB2024111308
SB2025051631
#VU100418 - Integer overflow
CVE-2024-21783		 CWE-190 Low
No
No
 - 13.11.2024 SB2024111308
SB2025051631


Showing elements 81 - 100 out of 113