{"id":"CVE-2025-9548","title":"A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.","summary":"A potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"published":"2025-10-15","updated":"2026-10-08","sourceUpdated":"2026-10-08T11:10:00.250","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-9548","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-203293","label":"psirt@lenovo.com"}],"tags":["nvd","exploit-available"],"epss":0.00119,"epssPercentile":0.01753,"ingestedAt":"2026-10-08T11:31:27.438Z","exploits":{"github":1,"githubRepos":["https://github.com/CyberFrenchie/CVE-2025-9548"],"checkedAt":"2026-10-27T16:49:56.240Z"},"exploitAvailable":true,"slug":"CVE-2025-9548","body":"## Overview\n\nA potential null pointer dereference vulnerability was reported in the Lenovo Power Management Driver that could allow a local authenticated user to cause a Windows blue screen error.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":219341,"id":"CVE-2025-9548","ts":1791754375532,"field":"exploit_available","old":"false","new":"true"}]}