257 matches found
CVE-2025-63946-Tencent-PC-Manager-EoP
CVE-2025-63946 Escalade de privilèges dans Tencent PC Manager version : Version de PCManager inférieure ou égale à 17.10.28554.205 Résumé : J'ai découvert une vulnérabilité dans Tencent PC Manager où les fichiers et répertoires sous C:\Windows\Temp sont gérés de manière non sécurisée. Un attaquan...
CVE-2025-2502
로컬 권한 상승을 공부하던 중 우연히 발견했다. Lenovo PC Manager의 모든 버전에서 Lenovo PC Manager의 도구에는 권한 결함이 존재한다. 다운로드한 도구라면 일반 사용자가 F 권한완전 권한을 가진다. 모든 버전의 도구에 권한 문제가 존재하므로 일반 사용자가 admin 권한에 들어갈 수 있다. 여기서는 AI 看图 플러그인으로 시연한다. 이 플러그인은 system 권한 서비스를 가지고 있어 system으로 승격할 수 있다. 5.1.100.1102 이전에는 Lenovo PC Manager에 AI 看图 플러그...
CVE-2026-50438
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-50438
CVE-2026-50438 describes an elevation-of-privilege vulnerability in Microsoft PC Manager caused by improper link resolution before file access (link following). Reports from NVD, EUVD, CIRCL, MSRC, and CVE lists confirm the issue affects Microsoft PC Manager and enables an authorized local attack...
CVE-2026-58636
Microsoft Windows PC Manager is affected by CVE-2026-58636 due to improper link resolution before file access ("link following"), enabling an authenticated local attacker to elevate privileges. Current records indicate a local privilege escalation with high impact, but do not specify affected ver...
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
...
Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...
Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
Microsoft PC Manager < 3.21.6.0 Elevation of Privilege (CVE-2026-58636) (July 2026)
The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.21.6.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to gain elevated privileges on the system. CVE-2026-58636...
CVE-2026-15515
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
CVE-2026-15515
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
CVE-2026-15515 Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
CVE-2026-15515
The CVE-2026-15515 entry concerns Tencent PC Manager (version 18.1.30242.301) and its QMUDisk Driver component, specifically the qmudisk64.sys library. The vulnerability is described as an uncontrolled search path issue in the QMUDisk Driver, exploitable only via a local attack. The description n...
EUVD-2026-43256
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
CVE-2026-50512
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50511
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...