Elevation of Privilege Vulnerability in Microsoft PC Manager
CVE-2025-21322

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Microsoft Pc Manager
Vendor
CVE Published:
11 February 2025

Summary

A vulnerability in Microsoft PC Manager allows an attacker to elevate privileges on the affected system. By exploiting this issue, an attacker could potentially gain unauthorized access to sensitive system resources, thereby compromising the integrity and security of the environment. This vulnerability may lead to unauthorized actions being performed, affecting the overall security posture of the users.

Affected Version(s)

Microsoft PC Manager Unknown 1.0.0 < 3.15.4.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.