CVE-2019-6198

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges...

CVE-2024-43395

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a modified version of PUC Lua, as well as SDL for drawing. Prior to version 2.8.3, users of CraftOS-PC 2 on Windows can escape the computer folder and access files anywhere without...

CVE-2024-33581

A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges...

CVE-2024-10254

A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

5 Best VPN Services (2024): For Routers, PC, iPhone, Android, and More

It won’t solve all of your privacy problems, but a virtual private network can make you a less tempting target for hackers...

CVE-2024-10253: Heap-based Buffer Overflow

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

Lenovo PC Manager、Lenovo Browser和Lenovo App Store 安全漏洞

Lenovo App Store and others are products of Lenovo, a Chinese company.Lenovo App Store is a desktop application.Lenovo Browser is a browser.Lenovo PC Manager is a PC management software. A security vulnerability exists in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store that stems from the...

PT-2025-1584 · Lenovo · Lenovo Pcmanager +2

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Lenovo Browser affected versions not specified Lenovo App Store affected versions not specified Description: A potential buffer overflow issue was reported that could allow a local attacker to...

PT-2025-1583 · Lenovo · Lenovo Pcmanager +2

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Lenovo Browser affected versions not specified Lenovo App Store affected versions not specified Description: A potential TOCTOU vulnerability was reported that could allow a local attacker to...

CVE-2024-10254: Heap-based Buffer Overflow

A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

Microsoft PC Manager MSPCManagerService Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft PC Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

KLA78054 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49147 Exploitation Related products Microsoft-PC-Manager CVE list CVE-2024-49147 critical Solution Install necessary updates from th...

SUSE CVE-2024-35367

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8 hsubpelfiltersouter...

Intel HID Event Filter driver installer Privilege Escalation

The vulnerability of the Intel HID Event Filter driver installer for Intel NUC laptops is related to inherited permission errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows Microsoft PC Manager Symbolic Link Privilege Escalation

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2024-48967

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...

CVE-2024-48967

The CVE-2024-48967 entry concerns Baxter Life2000 ventilator and associated Service PC, where inadequate audit logging prevents detection of malicious activity. The description states that an attacker with access could alter ventilator settings without detection, leading to unauthorized informati...

CVE-2024-48967: Insufficient Logging

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings...