CVE-2026-0940

Improper BIOS Initialization Allowing Local Privilege Escalation on Lenovo ThinkPads

Published Mar 11, 2026 CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Description

A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.

Analysis

Technical impact

A BIOS vulnerability due to improper initialization has been identified in certain Lenovo ThinkPad models. The flaw can be exploited by a local user with privileged access to modify BIOS data and execute arbitrary code, potentially compromising the confidentiality, integrity, and availability of the affected system. The weakness is classified as CWE-665.

Affected Systems

Affected firmware is present in Lenovo ThinkPad BIOS versions for the P14s Gen 5, P15v Gen 3, P16v Gen 1, T14 Gen 5, Z13 Gen 1, Z13 Gen 2, Z16 Gen 1, and Z16 Gen 2. All models running firmware prior to the update referenced in Lenovo’s advisory are vulnerable; specific vulnerable version numbers are listed in the Lenovo support page linked above.

Risk and Exploitability

The vulnerability carries a CVSS score of 8.4, indicating high severity. An EPSS score of less than 1% suggests a low likelihood of active exploitation, and the issue is not listed in the CISA KEV catalog. Exploitation requires local privileged access; once achieved, an attacker can manipulate BIOS settings and run arbitrary code, leading to full system compromise.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Lenovo

ThinkPad T14 Gen 5 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.17

Lenovo

ThinkPad P14s Gen 5 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.17

Lenovo

ThinkPad Z13 Gen 2 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.37

Lenovo

ThinkPad Z16 Gen 2 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.37

Lenovo

ThinkPad P16v Gen 1 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.62

Lenovo

ThinkPad P15v Gen 3 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.28

Lenovo

ThinkPad Z13 Gen 1 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.76

Lenovo

ThinkPad Z16 Gen 1 BIOS

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.76

No data.

Vendor Product Versions

Lenovo

Thinkpad P14s Gen 5 Bios

Version	Status	Scheme	Platform
`[0,1.17]`	affected	generic	—

Lenovo

Thinkpad P15v Gen 3 Bios

Version	Status	Scheme	Platform
`[0,1.28]`	affected	generic	—

Lenovo

Thinkpad P16v Gen 1 Bios

Version	Status	Scheme	Platform
`[0,1.62]`	affected	generic	—

Lenovo

Thinkpad T14 Gen 5 Bios

Version	Status	Scheme	Platform
`[0,1.17]`	affected	generic	—

Lenovo

Thinkpad Z13 Gen 1 Bios

Version	Status	Scheme	Platform
`[0,1.76]`	affected	generic	—

Lenovo

Thinkpad Z13 Gen 2 Bios

Version	Status	Scheme	Platform
`[0,1.37]`	affected	generic	—

Lenovo

Thinkpad Z16 Gen 1 Bios

Version	Status	Scheme	Platform
`[0,1.76]`	affected	generic	—

Lenovo

Thinkpad Z16 Gen 2 Bios

Version	Status	Scheme	Platform
`[0,1.37]`	affected	generic	—

Remediation

Vendor Solution

Update to the version (or newer) indicated for your model in the Product Impact section of the advisory: https://support.lenovo.com/us/en/product_security/LEN-213040

OpenCVE Recommended Actions

Apply the firmware update for your ThinkPad model as specified in Lenovo’s product security advisory (https://support.lenovo.com/us/en/product_security/LEN-213040).
Verify your BIOS version; if it is older than the latest release, schedule an update immediately.

Generated by OpenCVE AI on March 17, 2026 at 15:26 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.148% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://support.lenovo.com/us/en/product_security/LEN-213040

History

Mar 20, 2026 3:45 PM Title updated View changes

Type	Values Removed	Values Added
Title		Improper BIOS Initialization Allowing Local Privilege Escalation on Lenovo ThinkPads

Mar 12, 2026 5:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mar 11, 2026 8:45 PM Description updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A potential improper initialization vulnerability was reported in the BIOS of some ThinkPads that could allow a local privileged user to modify data and execute arbitrary code.
First Time appeared		Lenovo Lenovo thinkpad P14s Gen 5 Bios Lenovo thinkpad P15v Gen 3 Bios Lenovo thinkpad P16v Gen 1 Bios Lenovo thinkpad T14 Gen 5 Bios Lenovo thinkpad Z13 Gen 1 Bios Lenovo thinkpad Z13 Gen 2 Bios Lenovo thinkpad Z16 Gen 1 Bios Lenovo thinkpad Z16 Gen 2 Bios
Weaknesses		CWE-665
CPEs		cpe:2.3:a:lenovo:thinkpad_p14s_gen_5_bios:::::::: cpe:2.3:a:lenovo:thinkpad_p15v_gen_3_bios:::::::: cpe:2.3:a:lenovo:thinkpad_p16v_gen_1_bios:::::::: cpe:2.3:a:lenovo:thinkpad_t14_gen_5_bios:::::::: cpe:2.3:a:lenovo:thinkpad_z13_gen_1_bios:::::::: cpe:2.3:a:lenovo:thinkpad_z13_gen_2_bios:::::::: cpe:2.3:a:lenovo:thinkpad_z16_gen_1_bios:::::::: cpe:2.3:a:lenovo:thinkpad_z16_gen_2_bios::::::::
Vendors & Products		Lenovo Lenovo thinkpad P14s Gen 5 Bios Lenovo thinkpad P15v Gen 3 Bios Lenovo thinkpad P16v Gen 1 Bios Lenovo thinkpad T14 Gen 5 Bios Lenovo thinkpad Z13 Gen 1 Bios Lenovo thinkpad Z13 Gen 2 Bios Lenovo thinkpad Z16 Gen 1 Bios Lenovo thinkpad Z16 Gen 2 Bios
References		https://support.lenovo.com/us/en/product_security/LEN-213040
Metrics		cvssV3_1 `{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 8.4, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

Subscriptions

Lenovo Thinkpad P14s Gen 5 Bios Thinkpad P15v Gen 3 Bios Thinkpad P16v Gen 1 Bios Thinkpad T14 Gen 5 Bios Thinkpad Z13 Gen 1 Bios Thinkpad Z13 Gen 2 Bios Thinkpad Z16 Gen 1 Bios Thinkpad Z16 Gen 2 Bios

Weaknesses