What is the CVSS score of CVE-2025-63946?

CVE-2025-63946 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Windows are affected by CVE-2025-63946?

Tencent PC Manager versions through 17.10.28554.205 contain a privilege escalation vulnerability that could allow local users to gain elevated system access, potentially compromising Windows…

Is there a public PoC exploit available for CVE-2025-63946?

Yes, a public proof-of-concept exploit is available for CVE-2025-63946. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-63946?

Within 24 hours: Inventory all systems running Tencent PC Manager and restrict user access to affected versions where feasible. Within 7 days: Communicate advisory to affected users, disable or uninstall Tencent PC Manager if not business-critical, and consider alternative endpoint protection solutions. Within 30 days: Monitor vendor for patch availability and develop deployment plan; if no patch emerges, evaluate decommissioning the product in favor of supported alternatives.

Windows CVE-2025-63946

HIGH

Improper Link Resolution Before File Access (CWE-59)

2026-02-23 cve@mitre.org

Windows Privilege Escalation Race Condition Pcmanager Tencent

7.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Feb 26, 2026 - 16:31 vuln.today

Public exploit code

CVE Published

Feb 23, 2026 - 20:28 nvd

HIGH 7.4

DescriptionCVE.org

A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

AnalysisAI

Technical ContextAI

Classified as CWE-59 (Improper Link Resolution Before File Access). Affects Pcmanager. A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.