Known vulnerabilities in ThinkPad X1 Yoga 4th Gen 20SA - page 3

Vendor: Lenovo
Software: ThinkPad X1 Yoga 4th Gen 20SA
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_yoga_4th_gen_20sa:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 57
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Yoga 4th Gen 20SA ThinkPad X1 Yoga 4th Gen 20SA is affected by 57 known vulnerabilities: 16 medium, 41 low Critical High Medium Low

Vulnerabilities (57)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109223 - Untrusted Search Path
CVE-2025-20041		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109222 - Untrusted Search Path
CVE-2025-21099		 CWE-426 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109221 - Improper Access Control
CVE-2025-20052		 CWE-284 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109220 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-20003		 CWE-59 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109218 - Out-of-bounds read
CVE-2025-20101		 CWE-125 Low
No
No
 - 15.05.2025 SB2025051567
SB2025051578
SB2025051950
#VU109186 - Use After Free
CVE-2025-20062		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109185 - Out-of-bounds read
CVE-2025-20026		 CWE-125 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109184 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-20039		 CWE-362 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109183 - Use After Free
CVE-2025-20006		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109180 - Stack-based buffer overflow
CVE-2025-20618		 CWE-121 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109179 - Improper input validation
CVE-2025-20032		 CWE-20 Low
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109176 - Use After Free
CVE-2025-20046		 CWE-416 Medium
No
No
 - 14.05.2025 SB2025051450
SB2025051577
#VU109162 - Unquoted Search Path or Element
CVE-2024-31073		 CWE-428 Low
No
No
 - 14.05.2025 SB2025051419
SB2025051524
#VU104104 - Improper Access Control
CVE-2021-37577		 CWE-284 Low
No
No
 - 20.02.2025 SB2025022016
SB2025051556
#VU100422 - Untrusted Search Path
CVE-2024-28952		 CWE-426 Low
No
No
 - 13.11.2024 SB2024111309
SB2025051533
#VU73735 - Improper input validation
CVE-2022-48189		 CWE-20 Low
No
No
 N2HUJ49W.exe (N2HET73W) 15.03.2023 SB2023031552
#VU73733 - Improper input validation
CVE-2022-4574		 CWE-20 Low
No
No
 N2HUJ48W.exe (N2QET50W) 15.03.2023 SB2023031552


Showing elements 41 - 60 out of 57