CVE-2025-9201 - A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges

Back Back to CVE browser

HIGH

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges

Published Sep 11, 2025

8.5

HIGH

CVSS 4.0

EPSS 0.17%

Description

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code with elevated privileges.

Affected products

Vendor Lenovo Product Browser Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <9.0.6.8111

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Browser

unaffected

Version	Status	Constraints
0	affected	<9.0.6.8111

Remediation

Vendor solution

Update Lenovo Browser to version 9.0.6.8111 or later.

Weaknesses (1)

CWE-427

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28985		Advisory
https://iknow.lenovo.com.cn/detail/431735

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Sep 11, 2025

Updated Sep 11, 2025

Reserved Aug 19, 2025

Link CVE-2025-9201

CISA Vulnrichment

Updated Sep 11, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-9201

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-9201

ENISA EUVD

Assigner lenovo

Published Sep 11, 2025

Updated Sep 11, 2025

Exploited since n/a

Link EUVD-2025-28985

EUVD-2025-28985