CVE-2025-10581: High severity Lenovo PC Manager vulnerability
A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Lenovo PC Managerto a version that resolves this vulnerability.Fixed in 5.1.140.9262
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10581?
CVE-2025-10581 is categorized as a high severity vulnerability due to its potential for code execution with elevated privileges.
How do I fix CVE-2025-10581?
To fix CVE-2025-10581, update the Lenovo PC Manager to the latest version provided by Lenovo.
Who is affected by CVE-2025-10581?
CVE-2025-10581 affects users of Lenovo PC Manager who have local authenticated access.
What type of vulnerability is CVE-2025-10581?
CVE-2025-10581 is a DLL hijacking vulnerability that can be exploited to run malicious code.
Can CVE-2025-10581 be exploited remotely?
No, CVE-2025-10581 requires local authenticated access to exploit the vulnerability.