CVE-2022-4434

4.4 mediumEPSS 0.2%

Medium (4.4) in lenovo thinkpad x13s firmware. EPSS 0.2% chance of exploitation in the next 30 days.

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-11-01)
CWEs: CWE-125, CWE-126
Published: 2023-01-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lenovo:thinkpad_x13s_firmware

References

https://support.lenovo.com/us/en/product_security/LEN-103709
https://support.lenovo.com/us/en/product_security/LEN-103709

Check your stack JSON