A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.
PoC: MSRMapper
MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring Your Own Vulnerable Driver) attack.
PoC: Lenovo-CVE-2025-8061
My PoC of Lenovo-CVE-2025-8061
PoC: CVE-2025-8061-Exploit
Exploit LnvMSRIO.sys vulnerable driver
PoC: lenovo-dispatcher-poc
PoC to exploit lenovo dispatcher driver (LnvMSRIO.sys) (CVE-2025-8061)
PoC: Lenovo-CVE-2025-8061
PoC for popping a system shell against the LnvMSRIO.sys driver
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free