Lenovo Dock Manager vulnerabilities

4 CVEs affecting Lenovo Dock Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-63426, published 2026-08-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-63426, published 2026-08-13. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with…
CVE-2026-63425, published 2026-08-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with…
CVE-2026-63424, published 2026-08-13. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
CVE-2025-8421, published 2025-11-12. Medium severity, CVSS 6.6. EPSS: 0.1% chance of exploitation in the next 30 days. An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with…