CVE-2025-0886 - An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges

Back Back to CVE browser

HIGH

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges

Published Jul 17, 2025

8.5

HIGH

CVSS 4.0

EPSS 0.18%

Description

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges.

Affected products

Vendor Lenovo Product Elliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.1893
Vendor Lenovo Product Elliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
Vendor Lenovo Product Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
Vendor Lenovo Product Elliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.106.2391
Vendor Lenovo Product Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
Vendor Lenovo Product Elliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
Vendor Lenovo Product Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.548
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.858
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.858
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.858
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.858
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.858
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.2.61209.5
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG)) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.2.61209.5
Vendor Lenovo Product Elliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
Vendor Lenovo Product Elliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.761
Vendor Lenovo Product Elliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.761
Vendor Lenovo Product lliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.6136
Vendor Lenovo Product lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT) Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
Vendor Lenovo Product n/a Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1000.100.106.2391
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.1893
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.2234
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.2235
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.6136
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.774
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.801
- Version
  0
  Status
  affected
  Constraints
  <1000.100.108.900
- Version
  0
  Status
  affected
  Constraints
  <1000.100.109.82

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Elliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.1893

Lenovo

Elliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.801

Lenovo

Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.801

Lenovo

Elliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8)

unaffected

Version	Status	Constraints
0	affected	<1000.100.106.2391

Lenovo

Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.801

Lenovo

Elliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.801

Lenovo

Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.801

Lenovo

Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.548

Lenovo

Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.858

Lenovo

Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.858

Lenovo

Elliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.858

Lenovo

Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.858

Lenovo

Elliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.858

Lenovo

Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ)

unaffected

Version	Status	Constraints
0	affected	<3.2.61209.5

Lenovo

Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG))

unaffected

Version	Status	Constraints
0	affected	<3.2.61209.5

Lenovo

Elliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.801

Lenovo

Elliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.761

Lenovo

Elliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.761

Lenovo

lliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.6136

Lenovo

lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT)

unaffected

Version	Status	Constraints
0	affected	<1000.100.108.801

Lenovo

n/a

unaffected

Version	Status	Constraints
0	affected	<1000.100.106.2391
0	affected	<1000.100.108.1893
0	affected	<1000.100.108.2234
0	affected	<1000.100.108.2235
0	affected	<1000.100.108.6136
0	affected	<1000.100.108.774
0	affected	<1000.100.108.801
0	affected	<1000.100.108.900
0	affected	<1000.100.109.82

Remediation

Vendor solution

Update to the version (or newer) indicated for your model in the Product Impact section:Â https://support.lenovo.com/us/en/product_security/LEN-182738

Weaknesses (1)

CWE-276

Incorrect Default Permissions