Known vulnerabilities in ThinkPad X1 Yoga 6th Gen 20Y0 - page 2

Vendor: Lenovo
Software: ThinkPad X1 Yoga 6th Gen 20Y0
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_yoga_6th_gen_20y0:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 105
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Yoga 6th Gen 20Y0 ThinkPad X1 Yoga 6th Gen 20Y0 is affected by 105 known vulnerabilities: 18 medium, 87 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101960 - Untrusted Search Path
CVE-2024-35245		 CWE-426 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101959 - Improper input validation
CVE-2024-33611		 CWE-20 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101958 - Improper input validation
CVE-2024-33624		 CWE-20 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101945 - Improper input validation
CVE-2024-24984		 CWE-20 Medium
No
No
 - 27.12.2024 SB2024122732
SB20250521121
#VU101940 - Memory corruption
CVE-2024-34170		 CWE-119 Low
No
No
 - 27.12.2024 SB2024122730
SB20250520114
SB20250520132
#VU101939 - Untrusted Pointer Dereference
CVE-2024-34023		 CWE-822 Low
No
No
 - 27.12.2024 SB2024122730
SB20250520114
SB20250520132
#VU101938 - Memory corruption
CVE-2024-23919		 CWE-119 Low
No
No
 - 27.12.2024 SB2024122730
SB20250520114
SB20250520132
#VU101937 - Out-of-bounds write
CVE-2024-38665		 CWE-787 Low
No
No
 - 27.12.2024 SB2024122730
SB20250520114
SB20250520132
#VU96265 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-40536		 CWE-362 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96264 - Improper input validation
CVE-2023-38417		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB2024082049
SB2024082050
and 4 more
#VU96263 - Improper Check for Unusual or Exceptional Conditions
CVE-2023-45845		 CWE-754 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96262 - Improper input validation
CVE-2023-47210		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB2024082049
SB2024082050
and 4 more
#VU96261 - Improper Access Control
CVE-2023-47859		 CWE-284 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96260 - Improper input validation
CVE-2023-38654		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96215 - Improper Access Control
CVE-2024-28050		 CWE-284 Low
No
No
 - 19.08.2024 SB20240819159
SB2025052103
#VU96034 - Insecure inherited permissions
CVE-2024-25561		 CWE-277 Low
No
No
 - 15.08.2024 SB2024081517
SB20250520142
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 - 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU93109 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-21864		 CWE-74 Low
No
No
 - 24.06.2024 SB2024062504
SB2025052114
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 - 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 - 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more


Showing elements 21 - 40 out of 105