Security Advisory

CVE-2025-10237

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-10 14:10:56
Last updated 2026-06-11 03:55:29
Assigner lenovo
CVSS score 8.4
State PUBLISHED

Description

During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.