Privilege Escalation Vulnerability in Honor PC Manager by Honor Device Co., Ltd.
CVE-2025-46014

8.8HIGH

Key Information:

Vendor

Honor Device Co., Ltd.

Status
Honor PC Manager
Vendor
CVE Published:
30 June 2025

What is CVE-2025-46014?

A privilege escalation vulnerability exists in Honor Device Co., Ltd's Honor PC Manager v16.0.0.118. This vulnerability arises from the application connecting services to a named pipe ('iMateBookAssistant') with default security attributes that are either insufficiently restrictive or overly permissive. As a result, this could allow unauthorized users to escalate their privileges, potentially leading to unauthorized access to sensitive functions within the application.

References

https://github.com/Souhardya/Exploit-PoCs/tree/main/Honor...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-46014 : Privilege Escalation Vulnerability in Honor PC Manager by Honor Device Co., Ltd.