Home Microsoft CVE-2025-29975
Back to Microsoft

CVE-2025-29975

Microsoft PC Manager

Microsoft CVSS 7.8 Updated March 12, 2026

Executive Risk Summary

"An improper link resolution vulnerability in Microsoft PC Manager allows an authorized attacker to elevate privileges locally, potentially leading to unauthorized access to sensitive data and system resources. This vulnerability can be exploited by an attacker with local access to the system, making it a significant risk for organizations with sensitive data and systems."

Operational Audit Arsenal

Target Type Executable
Target Asset pcmanager.exe
Standard Path %programfiles%Microsoft PC Manager
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: pcmanager.exe (Executable)
$Targets = 'pcmanager.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Microsoft PC Manager service affected

Internal Work Notes

CVE-2025-29975: Local Privilege Escalation Vulnerability in Microsoft PC Manager - Apply patch from MSRC update guide

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.