Improper Permissions Vulnerability in Lenovo Dock Manager by Lenovo
CVE-2026-63425

8.5HIGH

Key Information:

Vendor

Lenovo
Status
Dock Manager
Vendor
CVE Published:
13 August 2026

What is CVE-2026-63425?

An improper permissions vulnerability has been identified in Lenovo Dock Manager that allows a local authenticated user to execute arbitrary code with elevated privileges. This could potentially lead to unauthorized access and control over the affected system. Users are advised to review their security settings and apply any available patches to mitigate risks associated with this vulnerability.

Affected Version(s)

Dock Manager 0 < 1.6.5.3

References

https://support.lenovo.com/us/en/product_security/LEN-223470
vendor-advisory
https://support.lenovo.com/us/en/solutions/ht037099#dm
productpatch

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.