Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-78r5-f9g4-5rvr

Опубликовано: 11 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.3
CVSS3: 7

Описание

A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.

A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.

EPSS

Процентиль: 0%
0.00005
Низкий

7.3 High

CVSS4

7 High

CVSS3

Дефекты

CWE-782

Связанные уязвимости

CVSS3: 7
nvd
5 месяцев назад

A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.

CVSS3: 7
fstec
5 месяцев назад

Уязвимость драйвера потребительских ноутбуков Lenovo Dispatcher 3.0, Dispatcher 3.1, связанная с недостаточным контролем доступа, позволяющая нарушителю повысить привилегии и выполнить произвольный код

EPSS

Процентиль: 0%
0.00005
Низкий

7.3 High

CVSS4

7 High

CVSS3

Дефекты

CWE-782