CVE-2025-53795: Improper Authorization

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...

KLA86899 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-53795 Exploitation Related products Microsoft-PC-Manager CVE list CVE-2025-53795 critical KB list Solution Install necessary updates...

CVE-2025-8098

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

CVE-2025-8098

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

Lenovo PC Manager 安全漏洞

Lenovo PC Manager is a PC management software from Lenovo China. A security vulnerability exists in Lenovo PC Manager, which stems from improper privileges and may result in local elevation of privileges...

CVE-2025-8098: Incorrect Default Permissions

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to access control errors, which allow attackers to escalate their privileges.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations lies in its improper handling of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to an incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2025-47993

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Microsoft PC Manager Elevation of Privilege Vulnerability (Jul 2025) - Windows

Microsoft PC Manager is prone to an elevation of privilege vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-47993

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-47993

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-49738

CVE-2025-49738 is a Windows vulnerability affecting Microsoft PC Manager. The issue is an improper link resolution before file access ("link following"), allowing an authorized local attacker to elevate privileges. The available data indicates a local-execution impact with high severity (CVSSv3: ...

CVE-2025-49738 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-47993 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-47993

CVE-2025-47993 — Microsoft PC Manager Elevation of Privilege An improper access control flaw in Microsoft PC Manager allows an authorized, locally present attacker to elevate privileges. Public advisories identify the vulnerable component as Microsoft PC Manager on Windows client systems and desc...