Read the docs

Lenovo

Records535All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high254CVSS 7.0–8.9

Exploited now

Lenovo records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Pcmanager · all components

TI-2022-01386 CVE-2022-1513 · GHSA-637m-x9v3-jvpw

OS command injection in Lenovo PCManager

Priority LOW 39

A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution when visiting a specially crafted website.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00576 Published 2022-08-23 Fixed in 5.0.10.4191 CWE-78
Priority LOW 38

A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00159 Published 2025-10-15 Fixed in 5.1.140.9262 CWE-427
Priority LOW 38

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00121 Published 2025-08-18 Fixed in 5.1.120.7041 CWE-276
Priority LOW 38

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00207 Published 2025-05-30 Fixed in 5.1.110.5082 CWE-276
TI-2025-02175 CVE-2025-2501 · GHSA-7m65-wj64-957x

Untrusted search path in Lenovo PC Manager

Priority LOW 38

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00188 Published 2025-05-30 Fixed in 5.1.110.5082 CWE-426
Priority LOW 35

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00137 Published 2024-07-31 Fixed in 2.8.90.11211 CWE-287
Priority LOW 35

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00137 Published 2024-07-31 Fixed in 2.8.90.11211 CWE-287
Priority LOW 34

A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00247 Published 2022-04-22 Fixed in 4.0.40.2175 CWE-427
Priority LOW 34

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00246 Published 2021-07-16 Fixed in 3.0.500.5102 CWE-427
Priority LOW 34

A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2021-04-27 Fixed in 3.0.400.3252 CWE-427
Priority LOW 34

A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2020-11-30 Fixed in 3.0.50.9162 CWE-16
Priority LOW 29

During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00134 Published 2026-03-11 Fixed in 5.1.160.12302 CWE-269
Priority LOW 29

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00132 Published 2025-05-30 Fixed in 5.1.110.5082 CWE-732
TI-2021-02655 CVE-2021-3721 · GHSA-j8c3-7w65-qf2g

Out-of-bounds write in Lenovo PCManager

Priority LOW 24

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a blue screen error.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00201 Published 2022-04-22 Fixed in 4.0.20.10282 CWE-787
Priority LOW 24

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00196 Published 2021-04-27 Fixed in 3.0.400.3252 CWE-276
Priority LOW 24

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2021-03-09 Fixed in 3.0.200.2042 CWE-276
Priority LOW 24

A vulnerability was reported in Lenovo PC Manager versions prior to 2.6.40.3154 that could allow an attacker to cause a system reboot.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0015 Published 2024-07-31 Fixed in 2.6.40.3154 CWE-20
Priority LOW 22

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configuration files to be written to non-standard locations during installation.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00191 Published 2022-04-22 Fixed in 4.0.40.2175 CWE-276
Open these records in search →