CVE-2025-8061 Privilege escalation in Dispatcher 3.0 Driver
An authenticated local user can execute code with elevated privileges on Lenovo notebooks using vulnerable Dispatcher drivers unless Core Isolation Memory Integrity is enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8061?
CVE-2025-8061 is a high-severity vulnerability in Lenovo Dispatcher 3.0 Driver, published on 11 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.
Weakness: CWE-782
Which versions are affected by CVE-2025-8061?
How do I fix CVE-2025-8061?
No fix has been published for CVE-2025-8061 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-8061 being exploited?
There is no known exploitation of CVE-2025-8061 in the wild and no public exploit code.
Public exploit code: 5 proofs of concept on GitHub.
Sources
Also known as GHSA-78r5-f9g4-5rvr.