Known vulnerabilities in Yoga Pro 9 14IRP8

Vendor: Lenovo
Software: Yoga Pro 9 14IRP8
Software CPE: cpe:2.3:h:lenovo:yoga_pro_9_14irp8:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 72
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Yoga Pro 9 14IRP8 Yoga Pro 9 14IRP8 is affected by 72 known vulnerabilities: 8 medium, 64 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119817 - State Issues
CVE-2025-9614		 CWE-371 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119816 - Insufficient Technical Documentation
CVE-2025-9613		 CWE-1059 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119815 - Improper Validation of Integrity Check Value
CVE-2025-9612		 CWE-354 Low
No
No
 - 10.12.2025 SB20251210202
SB2025122701
#VU119804 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38798		 CWE-200 Low
No
No
 - 10.12.2025 SB20251210176
SB2025122701
SB2026020648
and 2 more
#VU119030 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2025-47319		 CWE-497 Low
No
No
 - 02.12.2025 SB2025120232
SB2025122701
#VU119032 - Integer overflow
CVE-2025-47323		 CWE-190 Low
No
No
 - 02.12.2025 SB2025120232
SB2025122701
#VU113731 - Uncaught Exception
CVE-2025-3770		 CWE-248 Low
No
No
 - 07.08.2025 SB2025080722
SB20250908112
SB2025092259
and 9 more
#VU111030 - Out-of-bounds read
CVE-2025-2884		 CWE-125 Low
No
No
 - 11.06.2025 SB2025061103
SB2025061303
SB2025072845
and 4 more
#VU101959 - Improper input validation
CVE-2024-33611		 CWE-20 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101958 - Improper input validation
CVE-2024-33624		 CWE-20 Low
No
No
 - 27.12.2024 SB2024122751
SB20250521109
#VU101946 - Improper Initialization
CVE-2024-25563		 CWE-665 Low
No
No
 - 27.12.2024 SB2024122732
SB20250521121
#VU101945 - Improper input validation
CVE-2024-24984		 CWE-20 Medium
No
No
 - 27.12.2024 SB2024122732
SB20250521121
#VU101944 - Improper input validation
CVE-2024-28049		 CWE-20 Medium
No
No
 - 27.12.2024 SB2024122732
SB20250521121
#VU101943 - Improper input validation
CVE-2024-23198		 CWE-20 Medium
No
No
 - 27.12.2024 SB2024122732
SB20250521121
#VU96265 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-40536		 CWE-362 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96264 - Improper input validation
CVE-2023-38417		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB2024082049
SB2024082050
and 4 more
#VU96263 - Improper Check for Unusual or Exceptional Conditions
CVE-2023-45845		 CWE-754 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96262 - Improper input validation
CVE-2023-47210		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB2024082049
SB2024082050
and 4 more
#VU96261 - Improper Access Control
CVE-2023-47859		 CWE-284 Low
No
No
 - 20.08.2024 SB2024082048
SB20250521112
#VU96260 - Improper input validation
CVE-2023-38654		 CWE-20 Medium
No
No
 - 20.08.2024 SB2024082048
SB20250521112


Showing elements 1 - 20 out of 72