Known vulnerabilities in ThinkPad X1 Yoga 7th Gen 21CD - page 2

Vendor: Lenovo
Software: ThinkPad X1 Yoga 7th Gen 21CD
Software CPE: cpe:2.3:h:lenovo:thinkpad_x1_yoga_7th_gen_21cd:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 107
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkPad X1 Yoga 7th Gen 21CD ThinkPad X1 Yoga 7th Gen 21CD is affected by 107 known vulnerabilities: 17 medium, 90 low Critical High Medium Low

Vulnerabilities (107)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101960 - Untrusted Search Path
CVE-2024-35245		 CWE-426 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101959 - Improper input validation
CVE-2024-33611		 CWE-20 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101958 - Improper input validation
CVE-2024-33624		 CWE-20 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101949 - Out-of-bounds read
CVE-2024-32667		 CWE-125 Low
No
No
 - 27.12.2024 SB2024122738
SB20250520137
#VU101948 - Untrusted Search Path
CVE-2024-34028		 CWE-426 Low
No
No
 - 27.12.2024 SB2024122737
SB20250520137
#VU101947 - Improper Access Control
CVE-2024-32044		 CWE-284 Low
No
No
 - 27.12.2024 SB2024122736
SB20250520137
#VU101945 - Improper input validation
CVE-2024-24984		 CWE-20 Medium
No
No
 - 27.12.2024 SB2024122732
SB20250521121
#VU96265 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-40536		 CWE-362 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96264 - Improper input validation
CVE-2023-38417		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB2024082049
SB2024082050
and 4 more
#VU96263 - Improper Check for Unusual or Exceptional Conditions
CVE-2023-45845		 CWE-754 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96262 - Improper input validation
CVE-2023-47210		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB2024082049
SB2024082050
and 4 more
#VU96261 - Improper Access Control
CVE-2023-47859		 CWE-284 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96260 - Improper input validation
CVE-2023-38654		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96215 - Improper Access Control
CVE-2024-28050		 CWE-284 Low
No
No
 - 19.08.2024 SB20240819159
SB2025052103
#VU96034 - Insecure inherited permissions
CVE-2024-25561		 CWE-277 Low
No
No
 - 15.08.2024 SB2024081517
SB20250520142
#VU96031 - Incorrect Default Permissions
CVE-2023-43747		 CWE-276 Low
No
No
 - 15.08.2024 SB2024081514
SB20250520139
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 - 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU93109 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-21864		 CWE-74 Low
No
No
 - 24.06.2024 SB2024062504
SB2025052114
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 - 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 - 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more


Showing elements 21 - 40 out of 107