Lenovo PC Manager vulnerabilities

14 vulnerabilities

Known vulnerabilities in Lenovo PC Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.5HighCVE-2025-2502lenovo · pc manager +1 morelenovo pc managerAn improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.EPSS0.20%7.1HighCVE-2025-2503lenovo · pc manager +1 morelenovo pc managerAn improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.EPSS0.13%8.5HighCVE-2025-2501lenovo · pc manager +1 morelenovo pc managerAn untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.EPSS0.18%8.4HighCVE-2025-4657lenovo · app_store +2 morelenovo app_storeA buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code.EPSS0.18%7.7HighCVE-2025-10495lenovo · app_store +3 morelenovo app_storeA potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.EPSS0.22%8.5HighCVE-2025-10581lenovo · pc manager +1 morelenovo pc managerA potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.EPSS0.15%8.5HighCVE-2025-8486lenovo · pc manager +1 morelenovo pc managerA potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges.EPSS0.15%8.5HighCVE-2025-8098lenovo · pc manager +1 morelenovo pc managerAn improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges.EPSS0.12%5.5MediumCVE-2017-3772lenovo · pc manager +1 morelenovo pc managerA vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot.EPSS0.15%4.7MediumCVE-2024-10254lenovo · app_store +2 morelenovo app_storeA potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.EPSS0.13%4.7MediumCVE-2024-10253lenovo · app_store +2 morelenovo app_storeA potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash.EPSS0.13%7.8HighCVE-2019-6197lenovo · pc manager +1 morelenovo pc managerA vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.EPSS0.14%7.8HighCVE-2019-6198lenovo · pc manager +1 morelenovo pc managerA vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.EPSS0.14%6.8MediumCVE-2026-2640lenovo · pc manager +1 morelenovo pc managerDuring an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes.EPSS0.13%