Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-0940 EUVD-2026-11351GHSA-759r-c5hw-qm9q

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to mo…

Published Mar 11, 2026 · Updated Mar 13, 2026 · Assigned by lenovo

Description

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.

Affected products

VendorProductAffectedFixed
Lenovo ThinkPad T14 Gen 5 BIOS ≤ 1.17 —
Lenovo ThinkPad P14s Gen 5 BIOS ≤ 1.17 —
Lenovo ThinkPad Z13 Gen 2 BIOS ≤ 1.37 —
Lenovo ThinkPad Z16 Gen 2 BIOS ≤ 1.37 —
Lenovo ThinkPad P16v Gen 1 BIOS ≤ 1.62 —
Lenovo ThinkPad P15v Gen 3 BIOS ≤ 1.28 —
Lenovo ThinkPad Z13 Gen 1 BIOS ≤ 1.76 —
Lenovo ThinkPad Z16 Gen 1 BIOS ≤ 1.76 —

References