VULNERABILITY INTELLIGENCE

CVE-2023-40297

CVSS score7.5 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2024-05-15

Last modified2026-06-17

Description

A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.