CVE-2025-36846: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Eveo URVE Web Manager 27.02.2025. The application exposes a /internal/pc/vpro.php localhost endpoint to unauthenticated users that is vulnerable to OS Command Injection. The endpoint takes an input parameter that is passed directly into the shellexec function of PHP...

Windows Microsoft PC Manager Privilege Escalation

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...

Windows Microsoft PC Manager Improper Symbolic Link Handling

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to an incorrect definition of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2025-47993

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Microsoft PC Manager Elevation of Privilege Vulnerability (Jul 2025) - Windows

Microsoft PC Manager is prone to an elevation of privilege vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-47993

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-47993

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-49738

CVE-2025-49738 is a Windows vulnerability affecting Microsoft PC Manager. The issue is an improper link resolution before file access ("link following"), allowing an authorized local attacker to elevate privileges. The available data indicates a local-execution impact with high severity (CVSSv3: ...

CVE-2025-49738 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-47993 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-47993 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2025-47993

CVE-2025-47993 — Microsoft PC Manager Elevation of Privilege An improper access control flaw in Microsoft PC Manager allows an authorized, locally present attacker to elevate privileges. Public advisories identify the vulnerable component as Microsoft PC Manager on Windows client systems and desc...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

KLA85522 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-49738 Exploitation Related products Microsoft-PC-Manager CVE list CVE-2025-49738 critical Solution Install necessary updates from th...