Improper Permission Vulnerability in Lenovo PC Manager
CVE-2025-8098

8.5HIGH

Key Information:

Vendor

Lenovo
Status
Pc Manager
Vendor
CVE Published:
18 August 2025

What is CVE-2025-8098?

A vulnerability in Lenovo's PC Manager has been identified, wherein improper permission handling could enable local attackers to escalate their privileges. This flaw poses a significant risk, allowing unauthorized users to gain elevated access to restricted system functions. Users are encouraged to review their current version and apply any necessary updates to mitigate this security risk.

Affected Version(s)

PC Manager 0 < 5.1.120.7041

References

https://iknow.lenovo.com.cn/detail/430658

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.