257 matches found
CVE-2025-2502
学习本地权限提升的过程中无意中发现的。 在联想电脑管家的任意版本中，联想电脑管家的工具都存在权限缺陷，只要是下载的工具，普通用户拥有 F 权限（完全权限） 由于所有版本的工具都存在权限问题，普通用户可以进如 admin 权限，这边使用 ai 看图插件演示，因为其有 system 权限服务，可以提升至 system，在 5.1.100.1102 之前，联想电脑管家存在插件 AI 看图 在安装 AI 看图插件后，其存在一个可持续服务 root@kitploit:...
CVE-2025-63946-Tencent-PC-Manager-EoP
CVE-2025-63946 Escalada de Privilegios en Tencent PC Manager versión: PCManager versión menor o igual a 17.10.28554.205 Resumen: Descubrí una vulnerabilidad en Tencent PC Manager donde los archivos y directorios bajo C:\Windows\Temp se manejan de forma insegura. Un atacante puede aprovechar ataqu...
CVE-2026-50438
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-50438 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-50438
CVE-2026-50438 describes an elevation-of-privilege vulnerability in Microsoft PC Manager caused by improper link resolution before file access (link following). Reports from NVD, EUVD, CIRCL, MSRC, and CVE lists confirm the issue affects Microsoft PC Manager and enables an authorized local attack...
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-58636
Microsoft Windows PC Manager is affected by CVE-2026-58636 due to improper link resolution before file access ("link following"), enabling an authenticated local attacker to elevate privileges. Current records indicate a local privilege escalation with high impact, but do not specify affected ver...
Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...
Microsoft PC Manager Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
Microsoft PC Manager < 3.21.6.0 Elevation of Privilege (CVE-2026-58636) (July 2026)
The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.21.6.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to gain elevated privileges on the system. CVE-2026-58636...
CVE-2026-15515
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
CVE-2026-15515 Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
CVE-2026-15515
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
EUVD-2026-43256
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is...
CVE-2026-15515
The CVE-2026-15515 entry concerns Tencent PC Manager (version 18.1.30242.301) and its QMUDisk Driver component, specifically the qmudisk64.sys library. The vulnerability is described as an uncontrolled search path issue in the QMUDisk Driver, exploitable only via a local attack. The description n...
CVE-2026-50512
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50511
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...