Posts

Showing posts from 2026

UMC Report: Full Technical Investigation on LLT

  Published on UMC Blogger Official Overview During an active testing session, our team conducted a deep investigation into unexpected behavior observed in Lenovo's WMI GameZone interface and the custom boot logo functionality within the Lenovo Legion Toolkit (LLT). This report summarizes the findings, root causes, and pending action items identified throughout the session. Background Testing began with the deployment of test1.ps1  a diagnostic script targeting the root\WMI namespace — specifically the LENOVO_GAMEZONE_DATA class. The script operates in safe mode, meaning it only invokes Get/Is methods that require no [In] parameters, to protect system integrity during automated testing. Initial output from the script returned minimal results, causing confusion among the team. At this stage, the root cause was not yet identified. Finding 1 — WMI Method Parameter Requirement After testing on a 2025 Legion 5 15AKP10 running Windows PowerShell ISE as administrator, ...

UMC Suspends Sunwoda-made batteries over LGES lawsuit

 United Metrolite Central (UMC) will temporarily suspend all battery systems made by Sunwoda Electronic because of the escalating patent dispute started by LG Energy Solution. This includes all Sunwoda-integrated systems that UMC monitors. One retired unit of the Lenovo IdeaPad Gaming 3 15ACH6, which has a Sunwoda battery, is now classified under restricted status. The suspension is a precaution and is based on ongoing legal and regulatory issues, including investigations by the Korea Trade Commission. No safety defect has been confirmed. This step is only due to legal uncertainty and possible effects on battery supply chains. The directive will remain in place until the dispute is resolved and related regulatory decisions are made.

The #1 Trending has exploded!

Image
 As of April 11, 2026. The trend in my post ( click here ) was exploded. This sets new trend in gaming.lenovo.com website (Legion Gaming Community). I shared to my Discord to see visibility boost among top-ranked posts!

WARNING (updated): CPUID website has been compromised.

  Advisory ID: UMC-SA-2026-001 Date: April 10, 2026 Severity: HIGH Affected Software: CPUID HWMonitor, CPU-Z (all versions downloaded from cpuid.com) Status: Unresolved — CPUID has not yet issued an official statement Summary The official CPUID website (cpuid.com) has been reported as compromised as of April 10, 2026. Community reports indicate that downloads of HWMonitor 1.63 from the official site are delivering a malicious installer named HWiNFO_Monitor_Setup.exe instead of the expected hwmonitor_1.63.exe. This installer has triggered Windows Defender warnings and includes a Russian-language dialog, indicating it is not a legitimate CPUID package. UMC advises all users to immediately stop downloading any software from cpuid.com until further notice. Affected Products HWMonitor – hardware monitoring tool CPU-Z – CPU identification and information tool Any other software distributed via cpuid.com Note: If you already have these tools installed from before April 10, 2026, your...

NEXT 2026: UMC Fleet Re-Platforming Roadmap and the Road Ahead

  Published by United Metrolite Central | April 2026 United Metrolite Central (UMC) is officially announcing its NEXT 2026 initiative, a structured fleet re-platforming effort that will transition UMC's managed device ecosystem toward next-generation AI PC hardware over the remainder of 2026 and beyond. This post serves as the central reference document for all stakeholders regarding planned device transitions, retirement timelines, and procurement decisions currently under evaluation. Background Over the past several months, UMC has been actively monitoring the development of NVIDIA's N1X platform — an Arm-based SoC co-developed with MediaTek, combining 20 CPU cores with a Blackwell-class integrated GPU equivalent in CUDA core count to a desktop RTX 5070. Two Lenovo devices have been identified as primary candidates for UMC fleet deployment under the N1X platform: the Legion 7 15N1X11 and the Yoga 9 2-in-1 16N1X11 . It is important to note that NVIDIA's N1X has ex...

Revival of PowerSimple Meter

 Following the revival of PowerSimple Meter, we are proud to announce that it is a battery-health software platform that monitors battery-related conditions. I will be phased with the development progress. The development goal is to make a new terminal-based progress bar and much more. I will be providing exclusive content right here after retiring on 28/04/2025. This completely redesigned the GUI ASCII from the Power Meter XP-based. It has features in Terminal using WMI and Lenovo-related WMI dependencies. UPS and SBS battery systems are supported within WMI CIM compatibility of the new PowerSimple Meter, a PowerShell-based is intended only for UMC internal tools.

UMC Maintenance Advisory: Custom Desktop Thermal Issues

Image
 We are experiencing some issues due to mismatch of AIO radiator cooling placement with RGB fans is side. This could overheat on my Ryzen 5 8400F CPU. Here are Discord conversations in Legion Series server: Blaze | Legion 5 Gen 10 [LEGS] — 06:42 It's nearing thermal limit [Someone] — 06:42 Right now, these 9800X3D run hotter. Dark side of the Force Knowledgeables — 06:42 I would say you should take the RGB fan off the AIO [Someone] — 06:42 Go into BIOS and see what is the settings for the TDP. If it's like 4095W limit then clearly it was set to uncapped. . Tier 1 — 06:42 Where can I find this Blaze | Legion 5 Gen 10 [LEGS] Tier 2 — 06:42 Hmm ok. Dark side of the Force Knowledgeables — 06:43 Or at least keep the stock fan on then add the RGB fan as push/pull Shad0w_Dragon Knowledgeables — 06:43 Those temps at that wattage on an AIO??? Something is VERY, VERY wrong here Blaze | Legion 5 Gen 10 [LEGS] Tier 2 — 06:43 Also my 8400F ran hot Dark side ...

The Inventions Behind BSMS (Battery Safety Monitoring Systems)

  Published by United Metrolite Central AI Writing Disclosure: This article was drafted with the assistance of an AI writing tool. All technical specifications, product details, and UMC policy positions have been reviewed and verified by UMC staff prior to publication. What is BSMS? The Battery Safety Monitoring System (BSMS) is a fully open-source smart battery management solution developed by United Metrolite Central, designed to work across any device that uses lithium-ion battery packs — including laptops, handheld consoles, embedded systems, and custom-built battery packs. It serves as a transparent, user-serviceable alternative to the proprietary BMS found in most commercial devices, where firmware, safety logic, and cell communication protocols are locked behind manufacturer restrictions. BSMS is completely open, auditable, and buildable by anyone. The motivation behind BSMS was simple: proprietary BMS designs leave users and fleet operators with no visibility into...

New Lenovo Resources!

We created new hub of Lenovo Resources! These make easier for the Lenovo-related central hub of Lenovo and Lenovo Legion resources can help make better for new experience. Now updated by April 4th, 2026. These include new gaming and consumer oriented. Thank you for advance!

UMC Security Advisory: WARNING: Windows Boot Manager has been blocked by the current security policy.

Windows Boot Manager has been blocked by the current security policy. Recently, some of the BIOS and/or Windows updates are causing issues related to Secure Boot. We already have a guide on how to prevent and mitigate Secure Boot issues before June by updating certificates yourself. However, if you have an issue where Secure Boot set to On/Enabled causes you to not be able to boot into Windows, here is a guide. Create a FAT32 USB/SD card. Download SecureBootRecovery.zip - https://github.com/user-attachments/files/24540206/SecureBootRecovery.zip Create a folder called efi and inside it a folder called boot Extract the zip and put the file as \efi\boot\bootx64.efi (rename SecureBootRecovery.efi to bootx64.efi) on a FAT32 USB/SD card. Boot from that USB once. You can now boot to Windows with Secure Boot set to On/Enabled. sources: Unable to update Default UEFI DB #15 - https://github.com/cjee21/Check-UEFISecureBootVariables/issues/15#issuecomment-3732066463   (Closed on Is...

UMC warns against BYD if LG wins the lawsuit

United Metrolite Central (UMC) has reviewed recent developments involving BYD and ongoing patent enforcement by LG Energy Solution concerning battery management system (BMS) technologies. As a precautionary measure, UMC will temporarily ban all BYD-manufactured battery systems , including one (1) unit of Lenovo Legion 5 15AKP10 identified with a BYD-equipped battery. This action is based on legal and regulatory uncertainty related to the ongoing patent dispute. No safety defect has been confirmed. UMC remains committed to monitoring lithium-ion battery litigation and proactively mitigating potential risks through temporary restrictions where necessary. This directive is issued under UMC Fleet Center operations, managed by UMC Network Service. Thank you for your understanding.

Statement of UMC: Bot Automated

 Today, we are releasing the statement regarding bot automation claims on the GitHub issue #243. United Metrolite Central (UMC) is issuing this statement to address recent assumptions and discussions regarding automated behavior across our communication channels and development platforms. 1. No Automated Agents Operate Under UMC All actions performed under UMC—whether on X, GitHub, or internal testing environments—are executed manually by human operators.   UMC does not deploy bots, auto‑responders, automated posting pipelines, or scripted interaction systems. 2. Use of Assistive Tools Does Not Constitute Automation Our workflow includes modern writing and development aids such as grammar assistants, clarity tools, and IDE‑integrated helpers.   These tools do not initiate actions, make decisions, or interact with platforms autonomously.   They serve only to improve clarity, consistency, and documentation quality. 3. Transparency in Contribution Provena...

The Story of My Legion 5 Owners: A Pushback

At CES 2025 , Lenovo unveiled its 2025 lineup, including the new Legion 5 Gen 10, Legion Pro 7i, and the handheld Legion Go 2. I followed the announcements online, already considering an upgrade. Before July 2025, I had planned to replace my IdeaPad Gaming 3 15ACH6, which was starting to struggle with newer AAA titles. My initial target was to purchase the Legion 5 Gen 10 on August 17, 2025. However, those plans were delayed until November 17, 2025 due to security concerns and industry-wide turbulence surrounding critical BIOS/UEFI vulnerabilities. Eventually, my United Metrolite Central (UMC) acquired a Legion 5 Gen 10 (model 15AKP10, 2025) on November 16, 2025, and I picked it up the following day. This decision came after a selection process to find a device that could balance both gaming performance and work needs. Originally, we aimed to secure a Legion 7i, but it was out of stock. As a result, the Legion 5 became the final choice—and ultimately, the system I moved forward wit...

Microvision Project Updates: New EU law changes

 Per EU law (EU Batteries Regulation (2023/1542), Article 11), United Metrolite Central updated for all models including Microvision II Advanced Console (mainstream), Microvision X nano (rugged version), and Microvision II ZSX (high-performance by Zyrus) to comply with EU law requirements that have removable batteries and no lock-in battery firmware, just simple with Battery Safety Monitoring System (BSMS) module, allowing third-party battery to meet the all safety critieria. These projects are ongoing and expected to follow rugged and standard models depending on SKU model. The X nano RB (Removable Battery) is planned.

Yoga 9 2-in-1 16N1X11: The Rumors about NVIDIA N1X

 The NVIDIA N1X was rumored and scheduled to launch in H1 2026, the original release date was pushed back to 2026 after 2025 delay due to redesign and several mismatches. Lenovo accidentally leaked the Legion Space with support was " Legion 7 15N1X11 ", and later leaked new Yoga with N1X was " Yoga 9 2-in-1 16N1X11 ". Deployment of one unit is scheduled within same date is H1 2026 for United Metrolite to replace the L15 Gen 2 first via United Metrolite Central Network Service Deployment Unit (UMCNSDU) built-in in HQ. UMCNSDU will deploy the one unit for work and gaming with N1X is planned at date (Q1 2026 or H1 2026). We committed to use the script to check the readiness deployment which provided by service networks.

UMCBPC: Out Now!

 UMC announced that the United Metrolite Central Battery Procedure Checklist is no longer drafted and now available converted from PDF to text in the web.

Announcement for Fleet Lifecycle: Legion Go S

 UMC announced that fleet will be supported for lifecycle fleet until at least November 31, 2028 after purchased back at date February 9, 2025. This aligns with Lenovo PSREF's End of Support is December 4, 2030 date for Legion Go S 8ARP1. UMC will be re-platforming the entire fleet with partial AI PCs to ensure stability within fleets across managed systems. UMC developed by one-person developer for my script is "ThinkPad Utility Management" (TUM), a PowerShell-based code. Update: The future of Legion Go S will be replaced within Yoga 9 2-in-1 16N1X11.

Announcement: The L15 Gen 2a will be retiring

 After purchase on May 13, 2025 of used ThinkPad L15 Gen 2a, UMC announced that would end of service starting in March 15, 2027 and will be moved to new Yoga 9 2-in-1 16N1X11. This new model is powered by NVIDIA N1X, UMC is committed to ensure the updates are necessary. Based on Lenovo PSREF, the End of Support date is December 2027, its 9 months away after UMC ended before Lenovo ended their model of L15 Gen 2a. At the time, UMC will no longer in service after this date. Yoga 9 2-in-1 16N1X11 was tailored for productivity and gaming. This is major leap from this my older L15 Gen 2a model. We will continue to receive repair fixes and maintenance annually.

Special Announcement: Re-rolling the Role of Deployments

 United Metrolite Central announced that would reconsider the Role of Deployments now has several changes for the current role to new current role. This matches for the UMC deployment needs. This is a list of new changes will take effect in Q2 2026: ThinkPad L15 Gen 2a : Backup machine deployments with new my script " ThinkPad Utility Management " (TUM). Legion 5 15AKP10 : Primary machine deployments. Legion Go S 8ARP1 : Secondary machine deployments. Custom-built desktops : Third and backup machine deployments. This aligns with new broader changes for UMC strategy deployments in the managed environments. These deployments help make smoother and faster workflow environments in the managed that currently owned by a single-dev UMC center.

The First Recipient to Receive Nucleus Kanso 3 in Indonesia

  Peluncuran teknologi pendengaran terus berkembang pesat, dan salah satu inovasi terbaru yang menarik perhatian dunia adalah Cochlear™ Nucleus Kanso 3 , sebuah prosesor suara generasi baru yang dirancang untuk memberikan pengalaman mendengar yang lebih natural, ringkas, dan mudah digunakan. Meskipun informasi global mengenai perangkat ini sudah tersedia, data mengenai penerima pertama di Indonesia masih belum dipublikasikan secara resmi oleh Cochlear maupun institusi kesehatan terkait. Kemajuan Teknologi Nucleus Kanso 3 Nucleus Kanso 3 merupakan bagian dari portofolio sistem Cochlear yang lebih luas, termasuk keluarga Nucleus Nexa , yang diperkenalkan secara global pada tahun 2025. Sistem ini membawa beberapa peningkatan signifikan, seperti: Firmware yang dapat diperbarui pada implan, memungkinkan penerima mendapatkan inovasi masa depan tanpa harus mengganti perangkat internal. Prosesor suara yang lebih kecil dan lebih ringan , memberikan kenyamanan pemakaian sepanjang hari. Mana...

UMC Security Advisory Bulletin: Multi-Vendor BIOS Security Vulnerabilities (January, 2026)

 UMC reports that Lenovo had disclosed the " Multi-Vendor BIOS Security Vulnerabilities (January, 2026) ". These reports have industry-wide, not Lenovo was described from references such as Qualcomm security bulletin , Insyde Security Pledge , and Lenovo CDRT . Please refer on Lenovo security page . 1. Overview Multiple upstream firmware suppliers disclosed vulnerabilities affecting BIOS components used across OEM systems. These issues allow local attackers to execute code during firmware update , corrupt memory , or cause Secure Boot to silently disable despite being shown as enabled in BIOS . The vulnerabilities are tracked as: CVE‑2025‑12050 / CVE‑2025‑12051 — Buffer overflow in Insyde H2OFFT Firmware Flash Tool enabling arbitrary code execution during BIOS update. CVE‑2025‑47348 — Memory corruption vulnerability in BIOS. CVE‑2026‑0421 — Qualcomm BIOS variable‑initialization flaw causing Secure Boot to be disabled while UI reports it as enabled (User Mode only). These ...

UMC Statement on Battery Supplier for Microvision II series

 United Metrolite Central released a statement regarding about battery supplier for cell battery manufacturers. While we working on prototype, UMC has restricted the cell supplier, Zhuhai CosMX in Germany for planned release Microvision II and Microvision X nano after Court Munich found that ATL patent is enforcable and ruled out where ATL won the 2024 Munich infringement ruling until appealed when hearing is scheduled Higher Regional Court by March 2026. Our UMC team is taking serious action and penalize if CosMX illegally imported battery to the Germany under injunction law. The UMC Enforcement is on standby and if found, we take action. The UMC selects high-quality from cell supplier such as U.S., China, Taiwan, and Korea for better quality and reliable.

UMC Maintenance Advisory: UMC Investigates Heat Leak from L15 Gen 2

 During regular maintenance period, United Metrolite Central noticed that our own used ThinkPad L15 Gen 2a had thermal issues. UMC is investigating the root cause and comfirmed that found the issue was heat leak coming from SSD that no thermal pad installed. Since Lenovo removed the SSD thermal pad in many special-bid / fleet configuration, leaving NVMe with no proper heat path. This affects PCB motherboard and the battery zone (third-party battery installed on August 2025) caused by heat leak that NVMe couldn't cool down properly with expected at 64 °C max temperature for drive. UMC is working to resolve the heat leak issue by adding for thermal pad to reduce the warm temperature to cooled temperature. This best method is 1.0mm thickness of thermal pad is recommended to apply for L15 Gen 2a. UMC is looking the temperature for battery and drive via HWiNFO and Lenovo Vantage. Update on March 4, 2026 : The Thermal issue was fixed with CPU thermal repaste. The operation was returned.

The First Inventions: A Repairable Console of Microvision II

Image
     A long history of the Microvision, a first console with interchangeable catridge was launched by Milton Bradley in 1979. However, its small game library, its small screen, and a lack of support from established home video game companies led to its discontinuation in 1981. In this personal project, I revived the original Microvision with new modern project, called Microvision II (codename: Hawk Regine), a new modern look and repairable compliant with EU's 2027 Right to Repair. With new advanced features and designs look thinner than the original Microvision, this led to work for concept designs that drawn on paper by date in 2024. My original concept of planned to design from hand-drawn paper about concept of Microvision II (known as Microvision II Advanced Console) and X nano within advert-style based designs. A Microvision II concept design work art from 2024 Microvision X nano concept art from same year as 2024 With first to integrate with my own proprietary is Hey...

Lithium Prices are Skyrocketing again: Getting Expensive.

 In a short amount of time, lithium-ion batteries are now how a lot of us are storing energy in our devices like phones, laptops, and wearable tech. As the demand for tech grows, so does the global supply of lithium-ion batteries struggle to keep up. After lithium prices had corrected themselves in 2023 - 2024, they are now rising due to a strong electric vehicle market, increased use of solar energy storage, and new AI datacenter. This renewed upward pressure on lithium prices has significant downstream implications—not only for automotive and industrial battery applications, but also for the often-overlooked replacement battery market for personal computing devices. The Rise of the Lithium Prices After 2024 - 2025 lithium prices collapsed ~90% in 2023–2024 due to oversupply, the prices are growing again by 2025 - 2026 lithium prices are soaring ~130% from 2025 by late 2025, report data sources from Reuters . They're shrinking the lithium supply like Dongguan NVT Technology (Dong...

Battery Usage and Cost Mitigation Notice: ThinkPad L15 Gen 2

In response of ongoing increase in lithium battery price, it has been decided to keep using the third-party battery that is currently installed in the ThinkPad L15 Gen 2 due to the continuous rise in lithium battery component prices that are impacting both OEM and third-party suppliers. The goal of this measure is to lessen exposure to market volatility associated with lithium supply constraints and to mitigate higher replacement costs. Currently, UMC will continue to monitor as possible to watch both genuine and third-party batteries. This applies to our safety standards of procedures in the United Metrolite Central policies. We have regret of price increase as battery packs, UMC will have no responsibility for property damage, injury, or other accidents. Stay Safe and Stay Vigilant!

UMC Security Notice: NVIDIA Driver Vulnerability Impacts One-Fleet Gaming Ecosystem

  United Metrolite Central (UMC) is issuing a security notice following the publication of a new NVIDIA GPU driver security bulletin affecting the global gaming ecosystem. The issue originates from NVIDIA’s display driver software , impacting systems that rely on GeForce RTX GPUs across desktops, laptops, workstations, and experimental hardware. The vulnerability is software-level and is not tied to any single manufacturer or device design. Scope of Impact The affected component is the NVIDIA GPU Display Driver , a critical system driver that operates with deep operating-system privileges. According to NVIDIA, the vulnerabilities may allow: Privilege escalation Arbitrary code execution System instability or denial of service Potential information disclosure Because the same driver stack is used across vendors, all major gaming brands are affected if running vulnerable driver versions. This includes, but is not limited to: Lenovo (Legion, LOQ, IdeaPad Ga...

UMC Maintenance Advisory: We have a FIX for full missing MTM

 After motherboard was replaced by qualified Lenovo technician, UMC was found a missing or incomplete of full MTM ( 83F10023ID ) on current Legion 5 15AKP10, we had to recover the missing full MTM right here. I will be using a BIOS Tool Right to Repair provided from Lenovo Support. It might take a while but simple with careful you're looking in a bottom label or visiting Lenovo Support to see your MTM. Alert: The SN (Serial Number) / MTM (Machine Type Model) can be written only once and cannot be changed once written . Please carefully check your SN and MTM and verify the correct values before you input into the system. This app has a company description for WinMBDWizard.exe is  Hefei LCFC Information Technology Co., Ltd., a  major manufacturing subsidiary of Lenovo Group Limited — one of Lenovo’s largest research, development, and production bases for laptops and other devices, located in Hefei, Anhui Province, China . This confirmation verifies that the tool origi...

UMC PSA: DO NOT UPDATE TO THE NEW LEGION SPACE UPDATE!

United Metrolite Central advises Lenovo Legion users not to update to Legion Space version 1.8.12.13 at this time. Based on public reports, including those from Reddit's r/LenovoLegion, the latest Legion Space update has introduced several user-unfriendly changes, including: Intrusive ads A cluttered, ad-first interface that can reduce visibility of system controls Persistent forced update prompts when auto-updates are enabled Increased background activity due to online content fetching Reduced usability of previous version

Announcement: New UMC Laptop Approval Form Now Available

 United Metrolite Central (UMC) has officially launched a new Laptop Guidelines & Goods (LGG) Approval Form using Google Forms. This form is intended to register and request approval for laptops that will be used within the UMC environment. It serves as part of our ongoing effort to improve device governance, security compliance, and hardware standardization across UMC operations. What this form is for Registering company-issued or personally owned (BYOD) laptops Requesting formal approval before operational use Ensuring compliance with UMC security, quality, and policy requirements Review process All submissions are reviewed by the UMC Department of Approvals. The standard review timeframe is 5–7 business days. Additional verification may be required for certain devices (e.g. imported products, non-standard brands, or AI workloads). Security & privacy notice The form automatically collects respondent email addresses for verification and communication Do not submit sensitiv...

How the Code Check Misfired in Lenovo Legion Toolkit

  The real story behind Lenovo Legion Toolkit Issue #162 On January 15, 2026 , a GitHub issue was opened on the Lenovo Legion Toolkit repository by ScripterRickster . At first glance, it looked like a typical RGB bug: the keyboard lighting preview was broken, zones were missing, and the UI didn’t resemble the physical keyboard. But the truth turned out to be much deeper — and much simpler. This is the story of how a code check didn’t fail, yet still got everything wrong . The Symptom: A Broken RGB Keyboard Interface Users reported that: Only a few areas of the keyboard reacted to RGB changes The preview showed a strange horizontal strip instead of a full keyboard Lighting effects looked inconsistent or “random” Importantly, the application did not crash . Everything appeared to load normally — which made the issue harder to diagnose. The Initial Assumption: “The Check Passed” From a developer perspective, the toolkit had already passed its internal validation:...

Help us to test new Contempo theme — Your feedback matters

 UMC is planning to test the new Contempo Blogger theme as part of its broader ecosystem updates. This test allows users to explore the changes and compare the new design with the previous look and layout. We appreciate your participation and feedback as we evaluate this update. Thank you for your continued support during our testing period. Note: This is a testing of new theme, you will expect new changes and new added feature might contain spoiler if you don't see. UMC will continue to work with new blog design.

UMC Updates: New Modernized Look

UMC is rolling out a refreshed blog experience with a newly modernized Blogger theme. Beginning January 18, 2026 , the UMC blog will transition from its previous Soho Light design to Contempo, a cleaner, more modern layout. This update marks a milestone for UMC Blogger Official , celebrating three years of continuous blogging . The new theme reflects our ongoing commitment to improved readability, accessibility, and a better overall user experience. Update on January 20, 2026 : The theme is now live!

UMC Security Advisory: Security Vulnerability on Legion 5

 UMC has identified and collected from the  Lenovo Download regarding two newly identified BIOS security vulnerabilities— CVE-2024-38798 and CVE-2025-3770 —affecting the Lenovo Legion 5 15AKP10 (Global) and Legion R7000 AKP10 (China) models. Details of the vulnerabilities: CVE-2024-38798 – A medium-severity BIOS vulnerability in the TianoCore EDK2 firmware where local access may allow an attacker to cause exposure of sensitive information or potential escalation of privileges, impacting system confidentiality. CVE-2025-3770 – A higher-severity flaw also in EDK2 BIOS where a local attacker could trigger a protection mechanism failure , potentially allowing arbitrary code execution and affecting confidentiality, integrity, and availability. For more information, see the BIOS README for RYCN28WW on Lenovo Download: https://download.lenovo.com/consumer/mobiles/rycn28ww.txt Note: This UMC security advisory is issued independently and oversees the identificati...