Lenovo Power Management Driver vulnerabilities

4 CVEs affecting Lenovo Power Management Driver, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9548, published 2025-10-15.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-6192, published 2019-12-10. Medium severity, CVSS 4.4. EPSS: 1.7% chance of exploitation in the next 30 days. A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.
• CVE-2021-3463, published 2021-04-13. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error.
• CVE-2021-3462, published 2021-04-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.
• CVE-2025-9548, published 2025-10-15. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.