CVE-2025-68921

CVE-2025-68921 在许多游戏笔记本电脑上预装的音频增强软件 Nahimic 中存在一个本地权限提升漏洞。该漏洞允许低权限用户将权限提升至 NT AUTHORITY\SYSTEM。 该漏洞已报告给 Lenovo PSIRT，跟踪编号为 LEN-18785，并在修复后被分配为 CVE-2025-68921。 https://nvd.nist.gov/vuln/detail/CVE-2025-68921 视频 https://youtu.be/HqZR0RXFU48 漏洞分析 https://www.hackandhide.com/cve-2025-68921/...

CVE-2025-68921

CVE-2025-68921 Nahimic（多くのゲーミングノートPCにプリインストールされているオーディオ強化ソフトウェア）にローカル権限昇格の脆弱性が存在します。この問題により、低権限ユーザーが NT AUTHORITY\SYSTEM に権限を昇格させることが可能です。 この脆弱性は Lenovo PSIRT に報告され、LEN-18785 として追跡され、修正後に CVE-2025-68921 が割り当てられました。 https://nvd.nist.gov/vuln/detail/CVE-2025-68921 VID https://youtu.be/HqZR0RXFU48 解...

PT-2026-2854

Name of the Vulnerable Software and Affected Versions SteelSeries Nahimic 3 version 1.10.7 Description The software contains a directory traversal issue. This allows unauthorized access to system files. The issue affects a significant number of gaming laptops, potentially millions of devices...

Dell Alienware Command Center Input Validation Error Vulnerability

Dell Alienware Command Center is a series of gaming laptops from Dell, U.S.A. An input validation error vulnerability exists in Dell Alienware Command Center version 5.5.37.0 and prior, which stems from incorrect validation of user input. An attacker could use this vulnerability to send malicious...

Dell Alienware m17 R5 BIOS buffer overflow vulnerability

Dell Alienware is a line of gaming laptops from Dell USA. versions prior to Dell Alienware m17 R5 BIOS 1.2.2 contain a buffer overflow vulnerability that stems from a program boundary error when handling untrusted input. An attacker could use this vulnerability to send content larger than the...

Directory traversal

Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite system files and gain escalated privileges. One attack method is to change the Recommended App binary...

CVE-2020-13149

Dragon Center (MSI) on MSI Gaming laptops is affected by CVE-2020-13149 due to weak ACLs on the %PROGRAMDATA%\MSI\Dragon Center folder in versions before 2.6.2003.2401. A local authenticated attacker can overwrite system files and escalate privileges, with attack approaches including replacing th...