CVE-2026-63424
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
Risk Assessment
A local user could exploit an improperly protected key to elevate their privileges, potentially leading to unauthorized access to sensitive resources.
Recommendation
It is recommended to update Lenovo Dock Manager to the latest version that includes the fix. Also, ensure proper protection of keys and passwords.
Other vulnerabilities in Lenovo Dock Manager
See all- CVE-2026-63426High
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
- CVE-2026-63425High
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Original NVD description (English source)
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS