CVE-2025-9548CWE-476

CVE-2025-9548

Medium · published October 15, 2025

CVSS v3.1

5.5

EPSS

Percentile

1.7

In the wild

Unconfirmed

What it is

A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00119 · 1.7th percentile
Weakness: CWE-476 · NULL Pointer Dereference
Published: 2025-10-15T19:16Z

References (1)

https://support.lenovo.com/us/en/product_security/LEN-203293 · [email protected]

EPSS history

Timeline

15 OCT 14:25Z
A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a…
cvelistv5