CVE-2025-10237
Medium
Description
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
SeverityMedium
CVSS6.7
Exploit probability—
ProductThinkPad S2 Gen 7 Type 21BD BIOS
PublishedJun 10, 2026
First seenJun 10, 2026
Weakness typeCWE-327CWE-327
How to fix
Update
- Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS1.11 or later
- Lenovo X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS1.15 or later
- Lenovo L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS1.40 or later
- Lenovo T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS1.11 or later
- Lenovo P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOSUEFI BIOS V1.22/ECP V1.13 or later
- Lenovo L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS1.15 or later
- Lenovo L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS1.14 or later
- Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS1.13 or later
- Lenovo X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS1.09 or later
- Lenovo T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS1.09 or later
- Lenovo X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS1.46 or later
- Lenovo X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS1.26 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo ThinkPad S2 Gen 7 Type 21BD BIOS | v ≤ 1.36 | — |
| Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS | v < 1.11 | 1.11 |
| Lenovo X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS | v < 1.15 | 1.15 |
| Lenovo P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS | v ≤ 1.16 | — |
| Lenovo L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS | v < 1.40 | 1.40 |
| Lenovo T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS | v < 1.11 | 1.11 |
| Lenovo P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS | v < UEFI BIOS V1.22/ECP V1.13 | UEFI BIOS V1.22/ECP V1.13 |
| Lenovo L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS | v < 1.15 | 1.15 |
| Lenovo L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS | v < 1.14 | 1.14 |
| Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS | v < 1.13 | 1.13 |
| Lenovo X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS | v < 1.09 | 1.09 |
| Lenovo T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS | v < 1.09 | 1.09 |
| Lenovo X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS | v < 1.46 | 1.46 |
| Lenovo X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS | v < 1.26 | 1.26 |
| Lenovo Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS | v < 1.37 | 1.37 |
| Lenovo P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS | v < 1.65/1.13 | 1.65/1.13 |
| Lenovo X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS | v < 1.37 | 1.37 |
| Lenovo T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS | v < 1.28 | 1.28 |
| Lenovo P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS | v < 1.47 | 1.47 |
| Lenovo P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS | v < 1.39 / 1.15 | 1.39 / 1.15 |
| Lenovo P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS | v < BIOS: 1.66 / ECFW: 1.10 | BIOS: 1.66 / ECFW: 1.10 |
| Lenovo P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS | v < BIOS: 1.99/ ECFW: 1.58 | BIOS: 1.99/ ECFW: 1.58 |
| Lenovo X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS | v < 1.22 | 1.22 |
| Lenovo P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS | v < 1.52 | 1.52 |
| Lenovo T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS | v < 1.23 | 1.23 |
| Lenovo L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS | v < 1.34 | 1.34 |
| Lenovo L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS | v < 1.24 | 1.24 |
| Lenovo X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS | v < 1.29 / 1.11 | 1.29 / 1.11 |
| Lenovo S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS | v < 1.28 | 1.28 |
| Lenovo L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS | v < 1.27 | 1.27 |
| Lenovo X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS | v < 1.38 | 1.38 |
| Lenovo T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS | v < 1.62/1.12 | 1.62/1.12 |
| Lenovo P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS | v ≤ 1.28 | — |
| Lenovo P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS | v ≤ 1.70 | — |
| Lenovo X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS | v < 1.39 | 1.39 |
| Lenovo X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS | v < 1.21 | 1.21 |
| Lenovo T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS | v < 1.15 | 1.15 |
| Lenovo L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS | v < 1.27 | 1.27 |
| Lenovo T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS | v < 1.47/1.27 | 1.47/1.27 |
| Lenovo T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS | v ≤ 1.68 | — |
| Lenovo P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS | v < 1.30 / 1.15 | 1.30 / 1.15 |
| Lenovo T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS | v < 1.51 | 1.51 |
| Lenovo Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS | v < 1.76 | 1.76 |
| Lenovo T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS | v < 1.49 | 1.49 |
| Lenovo L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS | v < 1.44 | 1.44 |
| Lenovo X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS | v < 1.25 | 1.25 |
| Lenovo L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS | v < 1.31 | 1.31 |
| Lenovo X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS | v < 1.33 / 1.21 | 1.33 / 1.21 |
| Lenovo X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS | v < 1.53 | 1.53 |
| Lenovo L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS | v < 1.36 | 1.36 |
| Lenovo ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS | v < 1.38/1.36 | 1.38/1.36 |
| Lenovo X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS | v < 1.76 | 1.76 |
| Lenovo X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS | v < 1.52/ 1.28 | 1.52/ 1.28 |
| Lenovo X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS | v < 1.65 | 1.65 |
| Lenovo L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS | v < 1.36 | 1.36 |
| Lenovo T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS | v ≤ 1.98 | — |
| Lenovo X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS | v < 1.36 | 1.36 |
| Lenovo T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS | v ≤ 1.84 | — |
| Lenovo P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS | v < 1.33 | 1.33 |
| Lenovo ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS | v ≤ 1.38 | — |
| Lenovo X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS | v < 1.34 / 1.19 | 1.34 / 1.19 |
| Lenovo P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS | v ≤ 1.98 | — |
| Lenovo X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS | v < 1.38 | 1.38 |
| Lenovo X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS | v < 1.69 | 1.69 |
| Lenovo X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS | v ≤ 1.40 | — |
| Lenovo X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS | v < 1.17 | 1.17 |
| Lenovo L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS | v < 1.73 | 1.73 |
| Lenovo T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS | v < 1.12 | 1.12 |
| Lenovo T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS | v < 1.08 | 1.08 |
| Lenovo T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS | v < 1.69/1.21 | 1.69/1.21 |
| Lenovo X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS | v ≤ 1.35 | — |
| Lenovo X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS | v < 1.38 / 1.22 | 1.38 / 1.22 |
| Lenovo T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS | v < 1.38 | 1.38 |
| Lenovo T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS | v ≤ 1.34 | — |
| Lenovo X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS | v < 1.58 / 1.18 | 1.58 / 1.18 |
| Lenovo X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS | v < 1.41 | 1.41 |
| Lenovo X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS | v < 2.06 / 1.23 | 2.06 / 1.23 |
| Lenovo X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS | v < 1.67 / 1.56 | 1.67 / 1.56 |
| Lenovo X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS | v ≤ 1.87 | — |
| Lenovo P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS | v ≤ 2.01 | — |
| Lenovo T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS | v < 1.85/1.26 | 1.85/1.26 |
| Lenovo X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS | v < 1.56 / 1.26 | 1.56 / 1.26 |
| Lenovo L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS | v < 1.53 | 1.53 |
| Lenovo L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS | v < 1.45 | 1.45 |
| Lenovo L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS | v < 1.21 | 1.21 |
| Lenovo P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS | v < 1.17 | 1.17 |
| Lenovo L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS | v < 1.10 | 1.10 |
| Lenovo L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS | v < 1.06 | 1.06 |
| Lenovo T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS | v < 1.10 | 1.10 |
| Lenovo P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS | v < 1.18 / 1.14 | 1.18 / 1.14 |
| Lenovo P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS | v < 1.26 | 1.26 |
| Lenovo T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS | v < 1.18 | 1.18 |
| Lenovo X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS | v < 1.22 / 1.15 | 1.22 / 1.15 |
| Lenovo T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS | v < 1.16 | 1.16 |
| Lenovo P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS | v ≤ 1.20 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.