CVE-2022-1891

CVE-2022-1891 is a buffer overflow vulnerability in the SystemLoadDefaultDxe driver affecting various Lenovo Notebook products. An attacker with local privileges can exploit this flaw to execute arbitrary code, leading to high impacts on confidentiality, integrity, and availability, as reflected by its CVSS score of 7.8 (High). While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness. Its low EPSS score and absence from the KEV list suggest a lower immediate threat of widespread exploitation.