high7.8
CVE-2025-6232
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated pe…
Impact
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Commercial Vantage | before 20.2506.39.0 |
| Lenovo | Vantage | before 10.2501.20.0 |