Threats Tagged 'cve-2025-13152'
View all threats tagged with 'cve-2025-13152'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-13152'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-13152 is a high-severity DLL hijacking vulnerability in Lenovo One Client that allows a local authenticated user to execute code with elevated privileges. The flaw arises from an uncontrolled search path element, enabling attackers to load malicious DLLs. Exploitation requires local access and no user interaction, but no known exploits are currently in the wild. The vulnerability impacts confidentiality, integrity, and availability due to privilege escalation potential. European organizations using Lenovo One Client are at risk, especially in countries with high Lenovo market penetration and critical infrastructure reliance on this software. Mitigation involves applying vendor patches once available, restricting local user permissions, and monitoring for suspicious DLL loads. Given the CVSS 8.5 score, this vulnerability demands prompt attention to prevent potential lateral movement or system compromise. No authentication bypass or remote exploitation is possible, but the elevated privileges gained can lead to significant damage. Join the discussion | CVE Database V5 | 12/10/2025, 14:08:48 UTC Added: 12/10/2025, 14:22:54 UTC |
Showing 1 to 1 of 1 result