Local Privilege Escalation in Lenovo PC Manager Software
CVE-2026-2640

6.8MEDIUM

Key Information:

Vendor

Lenovo
Status
Pc Manager
Vendor
CVE Published:
11 March 2026

What is CVE-2026-2640?

A potential vulnerability has been identified in Lenovo PC Manager that permits a local authenticated user to terminate privileged processes. This flaw could be exploited to affect system operations, potentially allowing unauthorized access to sensitive resources or privileged functionality. This vulnerability underscores the importance of robust security measures in software applications, especially those that manage critical system settings.

Affected Version(s)

PC Manager 0 < 5.1.160.12302

References

https://iknow.lenovo.com.cn/detail/438816

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Victor Soler Renaud of Devoteam Purple Team for subsequently reporting this vulnerability.
.