Known vulnerabilities in ThinkPad X1 Fold Gen 1 20RK - page 3

Vendor: Lenovo
Software: ThinkPad X1 Fold Gen 1 20RK
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_fold_gen_1_20rk:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 94
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Fold Gen 1 20RK ThinkPad X1 Fold Gen 1 20RK is affected by 94 known vulnerabilities: 18 medium, 76 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109225 - Improper input validation
CVE-2025-20031		 CWE-20 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109224 - NULL Pointer Dereference
CVE-2025-20071		 CWE-476 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109219 - Untrusted Pointer Dereference
CVE-2025-20018		 CWE-822 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU104136 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2024-39271		 CWE-923 Low
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104135 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-36285		 CWE-362 Low
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104134 - Stack-based buffer overflow
CVE-2024-41166		 CWE-121 Low
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104133 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-40887		 CWE-362 Low
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104132 - Improper input validation
CVE-2024-39606		 CWE-20 Medium
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104131 - NULL Pointer Dereference
CVE-2024-39356		 CWE-476 Medium
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104130 - Use After Free
CVE-2024-41168		 CWE-416 Medium
No
No
 - 21.02.2025 SB2025022135
SB2025051634
#VU104075 - Improper Access Control
CVE-2024-30211		 CWE-284 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104071 - Improper Initialization
CVE-2024-26021		 CWE-665 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104063 - Improper input validation
CVE-2024-38307		 CWE-20 Medium
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU103983 - Improper input validation
CVE-2024-42410		 CWE-20 Low
No
No
 - 14.02.2025 SB2025021436
SB2025051636
SB2025052080
#VU103982 - Improper Access Control
CVE-2024-38310		 CWE-284 Low
No
No
 - 14.02.2025 SB2025021436
SB2025051636
SB2025052080
#VU103981 - Improper Access Control
CVE-2024-37355		 CWE-284 Low
No
No
 - 14.02.2025 SB2025021436
SB2025051636
SB2025052080
#VU96077 - Memory corruption
CVE-2023-38655		 CWE-119 Low
No
No
 - 16.08.2024 SB2024081629
SB20250520128
#VU96076 - Improper input validation
CVE-2023-34424		 CWE-20 Low
No
No
 - 16.08.2024 SB2024081629
SB20250520128
#VU96075 - Improper Initialization
CVE-2023-35061		 CWE-665 Low
No
No
 - 16.08.2024 SB2024081629
SB20250520128
#VU96073 - Improper Initialization
CVE-2023-48361		 CWE-665 Low
No
No
 - 16.08.2024 SB2024081629
SB20250520128


Showing elements 41 - 60 out of 94