Lenovo Computer

Name: Lenovo Computer
Brand: Lenovo

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical5high5medium3low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-8061US	—	0.43% (37th)	Exploit	no fix	2025-09-11	≤ Dispatcher driver <3.2
CVE-2024-33051US	—	0.30% (22nd)	—	no fix	2024-09-02	2 versions
CVE-2025-33189US	—	0.19% (9th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33187US	high7.8	0.18% (8th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33197US	medium5.5	0.18% (7th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33191US	medium5.5	0.18% (7th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33190US	high7.8	0.17% (6th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33188US	high7.8	0.17% (6th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33194US	high7.1	0.16% (5th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33195US	high7.8	0.16% (5th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33192US	medium5.5	0.15% (4th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33196US	medium5.5	0.15% (4th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33199US	low3.8	0.15% (4th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33200US	low3.3	0.15% (4th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33198US	low3.3	0.14% (4th)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA
CVE-2025-33193US	medium5.5	0.11% (1st)	—	no fix	2025-11-25	≤ Flash BIOS Update-ThinkStation PGX <S0QKT0AA

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-226Sensitive Information in Resource Not Removed Before Reuse3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-126Buffer Over-read1 CVEs
CWE-180Incorrect Behavior Order: Validate Before Canonicalize1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)16 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan