CVE Catalog
CVE-2026-63425
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.11%
1th percentile - higher than 1% of all known CVEs
Summary
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Risk Assessment
A local user could gain elevated privileges and execute arbitrary code, potentially leading to full system compromise.
Recommendation
It is recommended to update Lenovo Dock Manager to the latest version that includes the fix. Also, review and correct permission settings.
Original NVD description (English source)
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.