CVE-2025-68921

CVE-2025-68921 Existe una vulnerabilidad de escalada de privilegios local en Nahimic, un software de mejora de audio preinstalado en muchas laptops para gaming. El problema permite que un usuario con pocos privilegios escale a NT AUTHORITY\SYSTEM . Esta vulnerabilidad fue reportada a Lenovo PSIRT...

CVE-2025-68921

CVE-2025-68921 在 Nahimic（一款预装在众多游戏笔记本电脑上的音频增强软件）中存在一个本地权限提升漏洞。该问题允许低权限用户将权限提升至 NT AUTHORITY\SYSTEM。 此漏洞已报告给 Lenovo PSIRT，跟踪编号为 LEN-18785，并在修复后被分配为 CVE-2025-68921。 https://nvd.nist.gov/vuln/detail/CVE-2025-68921 视频 https://youtu.be/HZqR0RXFU48 分析文章 https://www.hackandhide.com/cve-2025-68921/...

PT-2026-2854

Name of the Vulnerable Software and Affected Versions SteelSeries Nahimic 3 version 1.10.7 Description The software contains a directory traversal issue. This allows unauthorized access to system files. The issue affects a significant number of gaming laptops, potentially millions of devices...

Dell Alienware Command Center Input Validation Error Vulnerability

Dell Alienware Command Center is a series of gaming laptops from Dell, U.S.A. An input validation error vulnerability exists in Dell Alienware Command Center version 5.5.37.0 and prior, which stems from incorrect validation of user input. An attacker could use this vulnerability to send malicious...

Dell Alienware m17 R5 BIOS buffer overflow vulnerability

Dell Alienware is a line of gaming laptops from Dell USA. versions prior to Dell Alienware m17 R5 BIOS 1.2.2 contain a buffer overflow vulnerability that stems from a program boundary error when handling untrusted input. An attacker could use this vulnerability to send content larger than the...

Directory traversal

Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite system files and gain escalated privileges. One attack method is to change the Recommended App binary...

CVE-2020-13149

Dragon Center (MSI) on MSI Gaming laptops is affected by CVE-2020-13149 due to weak ACLs on the %PROGRAMDATA%\MSI\Dragon Center folder in versions before 2.6.2003.2401. A local authenticated attacker can overwrite system files and escalate privileges, with attack approaches including replacing th...