AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

LenovoCVE-2026-63426

Lenovo Dock Manager: arbitrary file write

Lenovo

CVE-2026-63426 · Published Aug 13, 2026 · updated Sep 10, 2026

Medium6.9
Fix: upgrade to 1.6.5.3 or later
Lenovo advisory

During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.

Affected versions

PackageAffectedFixed in
Dock Manager
Product
< 1.6.5.31.6.5.3
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-59

More Lenovo advisories

All Lenovo
High 7.3Aug 13Lenovo System Update: authentication bypassCVE-2026-6387fixed in 5.08.04.85High 8.5Aug 13Lenovo Accessories and Display Manager: code executionCVE-2026-63423fixed in 1.0.9High 7.0Aug 13Lenovo Dock Manager: privilege escalationCVE-2026-63424fixed in 1.6.5.3High 8.5Aug 13Lenovo Dock Manager: insecure permissionsCVE-2026-63425fixed in 1.6.5.3High 7.3Aug 13Lenovo Vantage: code executionCVE-2026-15994fixed in 20.2026.20.0 +1Medium 5.7Aug 13Lenovo E14 Gen 6 Laptops ELAN TrackPoi: out-of-bounds writeCVE-2026-14256fixed in E16 Gen 2 (Type 21M5 +3