What’s Vulnerable › Vulnerabilities
CVE-2025-8061
- Severity: high (CVSS 7.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-09-11 · updated 2026-10-18
- Weakness: CWE-782
Description
A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.
Affected products
- Lenovo Dispatcher 3.0 Driver: before 3.1.0.41 — fixed in 3.1.0.41
- Lenovo Dispatcher 3.1 Driver: before 3.1.0.41 — fixed in 3.1.0.41
How to fix
Upgrade to a fixed version: Lenovo Dispatcher 3.0 Driver 3.1.0.41; Lenovo Dispatcher 3.1 Driver 3.1.0.41. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-8061 or the next vulnerability affects your stack