CVE-2025-63946

HIGH

Tencent PC Manager <17.10.28554.205 - Privilege Escalation

Title source: llm

Description

A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Exploits (1)

nomisec WRITEUP

by alexlee820 · poc

https://github.com/alexlee820/CVE-2025-63946-Tencent-PC-Manager-EoP

View Code ZIP pw:eip

References (2)

[Exploit, Third Party Advisory] https://github.com/alexlee820/CVE-2025-63946-Tencent-PC-Manager-EoP/blob/main/README.md

View Exploit ZIP pw:eip

[Various Sources] https://github.com/alexlee820/Tencent-PC-Manager-EoP

Scores

CVSS v3 7.4

EPSS 0.0003

EPSS Percentile 10.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-59

Status published

Products (1)

tencent/pcmanager < 17.10.28554.205

Published Feb 23, 2026

Tracked Since Feb 23, 2026