CVE-2025-10237
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad...
8.4 High
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.08%Up 0.1 points since Jun 11, 2026
What each source reports
CVE List Score used
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
- Record
CVE-2025-10237- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-327
- Updated
- 2026-11-02
EUVDEUVD-2025-210107
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
- Record
EUVD-2025-210107- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9h3m-vgr9-8wvv
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad...
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
- Record
GHSA-9h3m-vgr9-8wvv- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-327
- Updated
- 2026-11-02
NVD
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
- Record
CVE-2025-10237- CVSS 4.0
- 8.4 High
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-327
- Updated
- 2026-11-02
Affected products
- lenovo l13 (type 20r3, 20r4) laptops (thinkpad) bios
- lenovo l13 2-in-1 gen 6 (type 21r7, 21r8) laptops (thinkpad) bios
- lenovo l13 gen 4 (type 21fg, 21fh) laptop (thinkpad) bios
- lenovo l13 gen 5 (type 21lb, 21lc) laptops (thinkpad) bios
- lenovo l13 gen 6 (type 21rb, 21rc) laptops (thinkpad) bios
- lenovo l13 yoga gen 3 (type 21b5, 21b6) laptop (thinkpad) bios
- lenovo l14 gen 2 (type 20x5, 20x6) laptop (thinkpad) bios
- lenovo l14 gen 2 type 20x1 20x2 laptops (thinkpad) bios
- lenovo l14 gen 3 (type 21c1, 21c2) laptops (thinkpad) bios
- lenovo l14 gen 3 (type 21c5, 21c6) laptops (thinkpad) bios
- lenovo l14 gen 4 (type 21h1, 21h2) laptop (thinkpad) bios
- lenovo l14 gen 5 (type 21l1, 21l2) laptops (thinkpad) bios
Show 83 moreShow less
- lenovo l14 gen 6 (type 21s6, 21s7) laptops (thinkpad) bios
- lenovo l14 gen 6 (type 21se, 21sf) laptops (thinkpad) bios
- lenovo l15 gen 4 (type 21h7, 21h8) laptops (thinkpad) bios
- lenovo l16 gen 1 (type 21l7 21l8) laptops (thinkpad) bios
- lenovo l16 gen 2 (type 21sc, 21sd) laptops (thinkpad) bios
- lenovo l390 (type 20nr, 20ns) laptops (thinkpad) bios
- lenovo p1 gen 5 (type 21dc 21dd) laptop (thinkpad) bios
- lenovo p1 gen 6 (type 21fv, 21fw) laptop (thinkpad) bios
- lenovo p1 gen 7 (type 21kv, 21kw) laptop (thinkpad) bios
- lenovo p14s gen 2 (type 21a0, 21a1) laptop (thinkpad) bios
- lenovo p14s gen 4 (type 21k5, 21k6) laptop (thinkpad) bios
- lenovo p14s gen 5 (type 21g2, 21g3) laptops (thinkpad) bios
- lenovo p14s gen 6 (type 21ql, 21qm) laptops (thinkpad) bios
- lenovo p14s gen 6 (type 21qt, 21qu) laptops (thinkpad) bios
- lenovo p15v gen 3 (type 21en 21em) laptop (thinkpad) bios
- lenovo p16 gen 1 (type 21d6, 21d7) laptop (thinkpad) bios
- lenovo p16 gen 2 (type 21fa, 21fb) laptop (thinkpad) bios
- lenovo p16s gen 2 (type 21hk, 21hl) laptop (thinkpad) bios
- lenovo p16v gen 1 (type 21fc, 21fd) laptop (thinkpad) bios
- lenovo p16v gen 1 (type 21fe, 21ff) laptop (thinkpad) bios
- lenovo p16v gen 2 (type 21kx, 21ky) laptops (thinkpad) bios
- lenovo p16v gen 3 (type 21rs, 21rt) laptop (thinkpad) bios
- lenovo p17 gen 2 (type 20yu, 20yv) laptops (thinkpad) bios
- lenovo p73 (type 20qr, 20qs) laptop (thinkpad) bios
- lenovo s2 yoga gen 8 (types 21fu) china only laptop (thinkpad) bios
- lenovo t14 gen 3 (type 21ah, 21aj) laptop (thinkpad) bios
- lenovo t14 gen 5 (type 21mc, 21md) laptops (thinkpad) bios
- lenovo t14s (type 20t0, 20t1) laptop (thinkpad) bios
- lenovo t14s gen 3 (type 21br 21bs) laptop (thinkpad) bios
- lenovo t14s gen 3 (type 21cq 21cr) laptop (thinkpad) bios
- lenovo t14s gen 4 (type 21f6, 21f7) laptop (thinkpad) bios
- lenovo t14s gen 4 (type 21f8, 21f9) laptop (thinkpad) bios
- lenovo t14s gen 5 (type 21ls, 21lt) laptop (thinkpad) bios
- lenovo t14s gen 6 (type 21m1, 21m2) laptops (thinkpad) bios
- lenovo t14s gen 6 (type 21qx, 21qy) laptops (thinkpad) bios
- lenovo t14s gen 6 (type 21r1, 21r2) laptops (thinkpad) bios
- lenovo t14s gen 6 (type 21tb, 21tc) laptops (thinkpad) bios
- lenovo t15 (type 20s6, 20s7) laptop (thinkpad) bios
- lenovo t15 gen 2 (type 20w4, 20w5) laptop (thinkpad) bios
- lenovo t15g gen 1 (type 20ur 20us) laptop (thinkpad) bios
- lenovo t15p gen 2 (type 21a7, 21a8) laptop (thinkpad) bios
- lenovo t15p gen 3 (type 21da 21db) laptop (thinkpad) bios
- lenovo t16 gen 3 (type 21mn, 21mq) laptops (thinkpad) bios
- lenovo t16 gen 4 (type 21qe, 21qf) laptops (thinkpad) bios
- lenovo t16 gen 4 (type 22aw, 22ax) laptops (thinkpad) bios
- lenovo t490 (type 20n2, 20n3) laptop (thinkpad) bios
- lenovo thinkpad s2 gen 7 type 21bd bios
- lenovo thinkpad s2 yoga gen 6 type 21ag china only bios
- lenovo thinkpad s2 yoga gen 6 type 20vn china only bios
- lenovo x1 2-in-1 gen 10 (type 21nu, 21nv) laptop (thinkpad) bios
- lenovo x1 2-in-1 gen 9 (type 21ke, 21kf) laptop (thinkpad) bios
- lenovo x1 carbon 13th gen (type 21nx, 21ny) laptops (thinkpad) bios
- lenovo x1 extreme 2nd gen (type 20qv, 20qw) laptop (thinkpad) bios
- lenovo x1 extreme 3rd gen (type 20tk, 20tl) laptop (thinkpad) bios
- lenovo x1 extreme 4th gen (type 20y5, 20y6) laptop (thinkpad) bios
- lenovo x1 fold 16 gen 1 (type 21es, 21et) laptop (thinkpad) bios
- lenovo x1 fold gen 1 (type 20rk, 20rl) laptop (thinkpad) bios
- lenovo x1 nano gen 1 (type 20un 20uq) laptop (thinkpad) bios
- lenovo x1 nano gen 2 (type 21e8 21e9) laptop (thinkpad) bios
- lenovo x1 nano gen 3 (type 21k1, 21k2) laptop (thinkpad) bios
- lenovo x1 titanium (type 20qa, 20qb) laptop (thinkpad) bios
- lenovo x1 yoga 4th gen (type 20sa, 20sb) laptop (thinkpad) bios
- lenovo x1 yoga 5th gen (type 20ub, 20uc) laptop (thinkpad) bios
- lenovo x1 yoga 6th gen (type 20xy, 20y0) laptop (thinkpad) bios
- lenovo x1 yoga 7th gen (type 21cd, 21ce) laptop (thinkpad) bios
- lenovo x1 yoga 8th gen (type 21hq, 21hr) laptop (thinkpad) bios
- lenovo x12 detachable gen 1 (type 20uw, 20uv) laptop (thinkpad) bios
- lenovo x12 detachable gen 2 (type 21lk, 21ll) laptops (thinkpad) bios
- lenovo x13 gen 2 (type 20wk, 20wl) laptop (thinkpad) bios
- lenovo x13 gen 2 (type 20xh, 20xj) laptop (thinkpad) bios
- lenovo x13 gen 4 (type 21j3, 21j4) laptop (thinkpad) bios
- lenovo x13 gen 5 (type 21lu, 21lv) laptop (thinkpad) bios
- lenovo x13 gen 6 (type 21rk, 21rl) laptops (thinkpad) bios
- lenovo x13 gen 6 (type 21rm, 21rn) laptops (thinkpad) bios
- lenovo x13 yoga gen 1 (type 20sx, 20sy) laptop (thinkpad) bios
- lenovo x13 yoga gen 2 (type 20w8, 20w9) laptop (thinkpad) bios
- lenovo x13 yoga gen 3 (type 21aw 21ax) laptop (thinkpad) bios
- lenovo x13 yoga gen 4 (type 21f2, 21f3) laptop (thinkpad) bios
- lenovo x390 (type 20sc, 20sd) laptop (thinkpad) bios
- lenovo x390 yoga (type 20nn, 20nq) laptop (thinkpad) bios
- lenovo x9-14 gen 1 (type 21qa, 21qb) laptop (thinkpad) bios
- lenovo z16 gen 1 (type 21d4, 21d5) laptop (thinkpad) bios
- lenovo z16 gen 2 (type 21jx, 21jy) laptop (thinkpad) bios
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-10237 is a high vulnerability (CVSS 8.4) in Lenovo L13 (type 20r3, 20r4) Laptops (thinkpad) Bios, published June 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.08%, the 0th percentile. No source names a fixed version.