CVE-2026-89062: Medium severity Lenovo Energy Management driver vulnerability
Published Oct 15, 2026
·Updated
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.
Affected Software
1 affected component
Lenovo Energy Management driver
Event History
Oct 15, 2026
CVE Published
via MITRE·11:17 PM
Data Sourced
via MITRE·11:17 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Systems with the Lenovo Energy Management driver installed are potentially exposed. Exploitation requires local access and authentication with at least low privileges.
2
What impact can exploitation have?
A local authenticated attacker may be able to trigger a blue screen error, causing a denial of service. The provided severity vector indicates no confidentiality or integrity impact.