CVE-2025-10237: Lenovo l13 2-In-1 Gen 6 Type 21r7, 21r8 Laptops Thinkpad BIOS

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.

Affected products

  • Lenovo l13 2-In-1 Gen 6 Type 21r7, 21r8 Laptops Thinkpad BIOS: before 1.10 (fixed in 1.10)
  • Lenovo l13 Gen 4 Type 21fg, 21fh Laptop Thinkpad BIOS: before 1.24 (fixed in 1.24)
  • Lenovo l13 Gen 5 Type 21lb, 21lc Laptops Thinkpad BIOS: before 1.21 (fixed in 1.21)
  • Lenovo l13 Gen 6 Type 21rb, 21rc Laptops Thinkpad BIOS: before 1.15 (fixed in 1.15)
  • Lenovo l13 Type 20r3, 20r4 Laptops Thinkpad BIOS: before 1.45 (fixed in 1.45)
  • Lenovo l13 Yoga Gen 3 Type 21b5, 21b6 Laptop Thinkpad BIOS: before 1.31 (fixed in 1.31)
  • Lenovo l14 Gen 2 Type 20x1 20x2 Laptops Thinkpad BIOS: before 1.73 (fixed in 1.73)
  • Lenovo l14 Gen 2 Type 20x5, 20x6 Laptop Thinkpad BIOS: before 1.36 (fixed in 1.36)
  • Lenovo l14 Gen 3 Type 21c1, 21c2 Laptops Thinkpad BIOS: before 1.44 (fixed in 1.44)
  • Lenovo l14 Gen 3 Type 21c5, 21c6 Laptops Thinkpad BIOS: before 1.36 (fixed in 1.36)
  • Lenovo l14 Gen 4 Type 21h1, 21h2 Laptop Thinkpad BIOS: before 1.34 (fixed in 1.34)
  • Lenovo l14 Gen 5 Type 21l1, 21l2 Laptops Thinkpad BIOS: before 1.27 (fixed in 1.27)
  • Lenovo l14 Gen 6 Type 21s6, 21s7 Laptops Thinkpad BIOS: before 1.06 (fixed in 1.06)
  • Lenovo l14 Gen 6 Type 21se, 21sf Laptops Thinkpad BIOS: before 1.14 (fixed in 1.14)
  • Lenovo l15 Gen 4 Type 21h7, 21h8 Laptops Thinkpad BIOS: before 1.27 (fixed in 1.27)
  • Lenovo l16 Gen 1 Type 21l7 21l8 Laptops Thinkpad BIOS: before 1.40 (fixed in 1.40)
  • Lenovo l16 Gen 2 Type 21sc, 21sd Laptops Thinkpad BIOS: before 1.13 (fixed in 1.13)
  • Lenovo l390 Type 20nr, 20ns Laptops Thinkpad BIOS: before 1.53 (fixed in 1.53)
  • Lenovo p14s Gen 2 Type 21a0, 21a1 Laptop Thinkpad BIOS: before 1.33 (fixed in 1.33)
  • Lenovo p14s Gen 4 Type 21k5, 21k6 Laptop Thinkpad BIOS: before 1.47 (fixed in 1.47)
  • Lenovo p14s Gen 5 Type 21g2, 21g3 Laptops Thinkpad BIOS: before 1.26 (fixed in 1.26)
  • Lenovo p14s Gen 6 Type 21ql, 21qm Laptops Thinkpad BIOS: before 1.17 (fixed in 1.17)
  • Lenovo p14s Gen 6 Type 21qt, 21qu Laptops Thinkpad BIOS
  • Lenovo p15v Gen 3 Type 21en 21em Laptop Thinkpad BIOS: up to and including 1.28
  • Lenovo p16 Gen 1 Type 21d6, 21d7 Laptop Thinkpad BIOS: up to and including 1.70
  • and 70 more

Published 2026-06-10. Last modified 2026-10-07.