Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Microsoft PC Manager: Local Privilege Elevation via Link Following

CVE-2025-49738 · published 1 year ago
Summary

Microsoft PC Manager allows authorized users to execute privileged actions without proper authorization, potentially leading to unauthorized access to sensitive data and system functions. This issue requires a local attack, so your internal network is at risk. Update Microsoft PC Manager to the latest version to mitigate the vulnerability.

What to do
  • Update microsoft pc_manager to version 3.17.4.0 or later.
Affected software
VendorProductAffected versions
microsoft pc_manager < 3.17.4.0
cpe:2.3:a:microsoft:pc_manager:*:*:*:*:*:*:*:*
Original advisory text
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-59Link Following
Timeline
Published8 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-49738 · NVD
Track software like this
Free during beta