Known Vulnerabilities for Thinkpad P50 by Lenovo
Listed below are 10 of the newest known vulnerabilities associated with "Thinkpad P50" by "Lenovo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-10238 json | During an internal security assessment, a potential out-of-bounds write vulnerability was discovered in the BIOS of some Thi... | Not Provided | 2026-06-10 | 2026-06-10 |
| CVE-2025-10237 json | During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmwar... | Not Provided | 2026-06-10 | 2026-06-10 |
| CVE-2022-4575 json | A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could al... | 6.7 - MEDIUM | 2023-10-30 | 2023-11-08 |
| CVE-2021-3786 json | A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad system... | 5.5 - MEDIUM | 2021-11-12 | 2021-11-26 |
| CVE-2021-3599 json | A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attac... | 6.7 - MEDIUM | 2021-11-12 | 2021-11-24 |
| CVE-2020-8323 json | A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, an... | 6.7 - MEDIUM | 2020-06-09 | 2020-06-22 |
| CVE-2020-8320 json | An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. | 6.8 - MEDIUM | 2020-06-09 | 2020-06-17 |
| CVE-2019-19705 json | Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and ... | 7.8 - HIGH | 2022-12-26 | 2023-01-06 |
| CVE-2019-18619 json | Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to ... | 7.8 - HIGH | 2020-07-22 | 2020-07-30 |
| CVE-2019-18618 json | Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all ver... | 6 - MEDIUM | 2020-07-22 | 2020-07-30 |