CVE-2026-0940
Improper BIOS Initialization Allowing Local Privilege Escalation on Lenovo ThinkPads
A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.
CVSS 4.0 · 8.4 High
EPSS < 1%
KEV · Not listed
Vendors
Products