CVE-2025-0886

High

Description

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges.

SeverityHigh
CVSS7.8
Exploit probability—
ProductElliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW)
PublishedJul 17, 2025
First seenJul 17, 2025
Weakness typeCWE-276CWE-276

How to fix

Update
  • Lenovo Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW)1000.100.108.548 or later
  • Lenovo Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW)1000.100.108.801 or later
  • Lenovo Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG)1000.100.108.858 or later
  • Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6)1000.100.108.1893 or later
  • Lenovo Elliptic Human Presence Detection Driver for ThinkPad P14s Gen 5 (Type 21G2, 21G3)1000.100.108.801 or later
  • Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 5 (Type 21ME, 21MF)1000.100.108.6136 or later
  • Lenovo Elliptic Human Presence detection Device Driver for ThinkPad P16 Gen 2 (Type 21FA, 21FB)1000.100.108.774 or later
  • Lenovo Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL)1000.100.108.858 or later
  • Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA)1000.100.106.2391 or later
  • Lenovo lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT)1000.100.108.801 or later
  • Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 1 (Type 21FC, 21FD)1000.100.108.900 or later
  • Lenovo Elliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF)1000.100.108.2235 or later

Affected products

ProductAffected versionsFixed in
Lenovo Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW)v < 1000.100.108.5481000.100.108.548
Lenovo Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG)v < 1000.100.108.8581000.100.108.858
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6)v < 1000.100.108.18931000.100.108.1893
Lenovo Elliptic Human Presence Detection Driver for ThinkPad P14s Gen 5 (Type 21G2, 21G3)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 5 (Type 21ME, 21MF)v < 1000.100.108.61361000.100.108.6136
Lenovo Elliptic Human Presence detection Device Driver for ThinkPad P16 Gen 2 (Type 21FA, 21FB)v < 1000.100.108.7741000.100.108.774
Lenovo Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL)v < 1000.100.108.8581000.100.108.858
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA)v < 1000.100.106.23911000.100.106.2391
Lenovo lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 1 (Type 21FC, 21FD)v < 1000.100.108.9001000.100.108.900
Lenovo Elliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF)v < 1000.100.108.22351000.100.108.2235
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 2 (Type 21KX, 21KY)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ)v < 3.2.61209.53.2.61209.5
Lenovo Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG))v < 3.2.61209.53.2.61209.5
Lenovo Elliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE)v < 1000.100.108.8581000.100.108.858
Lenovo Elliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4)v < 1000.100.108.18931000.100.108.1893
Lenovo lliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD)v < 1000.100.108.61361000.100.108.6136
Lenovo Elliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7)v < 1000.100.108.8581000.100.108.858
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad T14s Gen 4 (Type 21F8, 21F9)v < 1000.100.108.18931000.100.108.1893
Lenovo Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Human Presence Detection driver for ThinkPad T14s Gen 6 (Type 21M1, 21M2)v < 1000.100.109.821000.100.109.82
Lenovo Elliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ)v < 1000.100.108.8581000.100.108.858
Lenovo Elliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8)v < 1000.100.106.23911000.100.106.2391
Lenovo Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Virtual Lock Sensor Service for ThinkPad X1 Carbon 12th Gen (Type 21KC, 21KD)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Human Presence Detection Device Driver for X13 2-in-1 Gen 5 (Type 21LW, 21LX)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY)v < 1000.100.108.7611000.100.108.761
Lenovo Elliptic Human Presence Detection Driver for ThinkPad X13 Gen 4 (Type 21J3, 21J4)v < 1000.100.108.22341000.100.108.2234
Lenovo Elliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV)v < 1000.100.108.8011000.100.108.801
Lenovo Elliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3)v < 1000.100.108.7611000.100.108.761

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.