CVE-2025-8486 - A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges

Back Back to CVE browser

HIGH

A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges

Published Oct 15, 2025

8.5

HIGH

CVSS 4.0

EPSS 0.15%

Description

A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges.

Affected products

Vendor Lenovo Product PC Manager Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <5.1.140.9262

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

PC Manager

unaffected

Version	Status	Constraints
0	affected	<5.1.140.9262

Remediation

Vendor solution

Update Lenovo PC Manager to version 5.1.140.9262 or later.

Weaknesses (1)

CWE-250

Execution with Unnecessary Privileges

References (1)

https://iknow.lenovo.com.cn/detail/432378
Vendor Advisory

Link	Providers	Tags
https://iknow.lenovo.com.cn/detail/432378		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Oct 15, 2025

Updated Feb 26, 2026

Reserved Aug 1, 2025

Link CVE-2025-8486

CISA Vulnrichment

Updated Oct 16, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-8486

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-8486