Out-of-Bounds Write Vulnerability in Lenovo Energy Management Driver
CVE-2026-89062

6.8MEDIUM

Key Information:

Vendor

Lenovo
Status
Energy Management Driver
Vendor
CVE Published:
15 October 2026

What is CVE-2026-89062?

A reported vulnerability in the Lenovo Energy Management driver could allow local authenticated users to perform an out-of-bounds write, potentially leading to system instability and blue screen errors. This issue underscores the importance of maintaining secure system interfaces to prevent unauthorized access and exploitation.

Affected Version(s)

Energy Management Driver 0 < 15.11.30.14

References

https://support.lenovo.com/us/en/product_security/LEN-218444

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks both Artemy Tsetsersky of Angara Security and Koh Tom Han, independent security researcher, for independently reporting this issue.
.