Lenovo Thinkpad e460 BIOS vulnerabilities

2 CVEs affecting Lenovo Thinkpad e460 BIOS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-3756, published 2017-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-3756, published 2017-08-18. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with…
CVE-2016-8222, published 2016-11-30. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management…