Lenovo Pcmanager vulnerabilities

20 CVEs affecting Lenovo Pcmanager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2640, published 2026-03-11.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-1513, published 2022-08-23. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may allow code execution when visiting a specially crafted website.
• CVE-2020-8351, published 2020-11-30. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges.
• CVE-2021-3464, published 2021-04-27. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation.
• CVE-2022-0192, published 2022-04-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation.
• CVE-2021-3550, published 2021-07-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation.
• CVE-2020-8357, published 2021-03-09. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations.
• CVE-2021-3721, published 2022-04-22. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a blue screen error.
• CVE-2025-2502, published 2025-05-30. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.
• CVE-2021-3451, published 2021-04-27. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations.
• CVE-2021-3722, published 2022-04-22. Medium severity, CVSS 5.0. EPSS: 0.2% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configuration files to be written to non-standard locations during installation.

Latest

• CVE-2026-2640, published 2026-03-11. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes.
• CVE-2025-8486, published 2025-10-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges.
• CVE-2025-10581, published 2025-10-15. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated…
• CVE-2025-8098, published 2025-08-18. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges.
• CVE-2025-2503, published 2025-05-30. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.
• CVE-2025-2501, published 2025-05-30. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.
• CVE-2024-33581, published 2024-10-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges.
• CVE-2019-6198, published 2024-07-31. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.
• CVE-2019-6197, published 2024-07-31. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.