CVE-2023-2290 (published 2023-06-26T19:44:19.989Z)
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products: Vendor: Lenovo
Product: ThinkPad 
Versions: various