CVE-2025-8061
High
Description
A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.
SeverityHigh
CVSS7.0
Exploit probability—
ProductDispatcher 3.0 Driver
PublishedSep 11, 2025
First seenSep 11, 2025
Weakness typeCWE-782CWE-782
How to fix
Update
- Lenovo Dispatcher 3.0 Driver3.1.0.41 or later
- Lenovo Dispatcher 3.1 Driver3.1.0.41 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo Dispatcher 3.0 Driver | v < 3.1.0.41 | 3.1.0.41 |
| Lenovo Dispatcher 3.1 Driver | v < 3.1.0.41 | 3.1.0.41 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.