CVE-2026-2640 — Improper Privilege Management in Lenovo PC Manager

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.0%
top 96.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Lenovo PC Manager
Timeline
PublishedMar 11

Description

During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to terminate privileged processes.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5lenovo/pc_manager< 5.1.160.12302

🔴Vulnerability Details

2
GHSA
GHSA-xxx7-j74c-5xrg: During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to t↗2026-03-11
▶
CVEList
CVE-2026-2640: During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager that could allow a local authenticated user to t↗2026-03-11
▶