Lenovo Thinkpad x1 Carbon vulnerabilities

2 CVEs affecting Lenovo Thinkpad x1 Carbon, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-12169, published 2018-09-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-12169, published 2018-09-21. High severity, CVSS 7.6. EPSS: 0.5% chance of exploitation in the next 30 days. Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation…
CVE-2017-3756, published 2017-08-18. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with…