CVE-2025-6232

HIGH 7.8CVE-2025-6232 · Published 17/07/2025 · updated 17/06/2026

In short

CVE-2025-6232 is a HIGH (CVSS 7.8) vulnerability affecting commercial vantage (lenovo), vantage (lenovo).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 10.7% of all vulnerabilities.
Fix: update to 20.2506.39.0, 10.2501.20.0 or later.

Package	Affected versions	Patched versions
commercial vantage lenovo	`< 20.2506.39.0`	`20.2506.39.0`
vantage lenovo	`< 10.2501.20.0`	`10.2501.20.0`

Description

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.

References

support.lenovo.com/us/en/product_security/LEN-196648 · Vendor Advisory

More vulnerabilities in commercial vantage

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free