Lenovo PC Manager 安全漏洞

Lenovo PC Manager is a PC management software from Lenovo China. A security vulnerability exists in Lenovo PC Manager that stems from improper default permissions, which may result in elevated privileges...

Lenovo PC Manager 安全漏洞

Lenovo PC Manager is a PC management software from Lenovo, a Chinese company. A security vulnerability exists in Lenovo PC Manager that stems from improper handling of permissions, which could lead to arbitrary file deletion...

CVE-2025-2501: Untrusted Search Path

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges...

CVE-2025-2503: Incorrect Permission Assignment for Critical Resource

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user...

CVE-2025-2502: Incorrect Default Permissions

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges...

CVE-2017-3772

A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot...

Microsoft PC Manager MSPCManagerService Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft PC Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

Microsoft PC Manager Elevation of Privilege Vulnerability (May 2025) - Windows

Microsoft PC Manager is prone to an elevation of privilege vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-29975

CVE-2025-29975 affects Microsoft PC Manager on Windows. It stems from improper link resolution before file access ("link following"), enabling a locally authenticated attacker to elevate privileges. The root cause is a link-following flaw in the PC Manager component, with high impact to confident...

CVE-2025-29975 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-29975 Microsoft PC Manager Elevation of Privilege Vulnerability

...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

PT-2025-20977 · Microsoft · Pcmanager

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Microsoft PC Manager. This allows an authorized attacker to elevate...

CVE-2025-29975: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

ZDI-23-1527 and ZDI-23-1528: The Potential Impact of Overly Permissive SAS Tokens on PC Manager Supply Chains

In ZDI-23-1527 and ZDI-23-1528 we uncover two possible scenarios where attackers could have compromised the Microsoft PC Manager supply chain...

Microsoft PC Manager < 3.15.4.0 Elevation of Privilege Vulnerability (Apr 2025) - Windows

Microsoft PC Manager is prone to an elevation of privilege vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...