Microsoft Pc Manager vulnerabilities

11 CVEs affecting Microsoft Pc Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-50438, published 2026-07-14.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-21322, published 2025-02-11. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Microsoft PC Manager Elevation of Privilege Vulnerability
• CVE-2024-49051, published 2024-11-12. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Microsoft PC Manager Elevation of Privilege Vulnerability
• CVE-2025-53795, published 2025-08-21. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-29975, published 2025-05-13. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
• CVE-2025-49738, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
• CVE-2026-50438, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
• CVE-2026-58636, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally.
• CVE-2026-50511, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
• CVE-2026-50512, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
• CVE-2026-49161, published 2026-06-09. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

Latest

• CVE-2025-49728, published 2025-09-16. Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days. Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security feature locally.