{"id":"CVE-2025-46014","aliases":["EUVD-2025-19506","GHSA-93ww-rvxc-x7gp"],"status":"published","title":"Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect...","description":"Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00424,"percentile":0.36952,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276","CWE-284"],"published":"2025-06-30T00:00:00Z","modified":"2026-06-17T09:25:53Z","products":[{"vendor":"honor","product":"pc_manager"}],"references":[{"url":"https://github.com/Souhardya/Exploit-PoCs/tree/main/HonorPCManager-PrivEsc","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46014"},{"url":"https://github.com/advisories/GHSA-93ww-rvxc-x7gp"}],"sources":{"cve":[{"id":"CVE-2025-46014","description":"Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2025-06-30T14:05:49.557Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-284","CWE-276"],"updated_at":"2026-11-02T14:32:36.385228Z"}],"euvd":[{"id":"EUVD-2025-19506","description":"Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2025-06-30T14:05:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:15.785343Z"}],"ghsa":[{"id":"GHSA-93ww-rvxc-x7gp","title":"Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect...","description":"Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation.","status":"published","published":"2025-06-30T03:30:31Z","modified":"2025-06-30T15:30:38Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T15:02:52.182291Z"}],"nvd":[{"id":"CVE-2025-46014","description":"Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation.","status":"published","published":"2025-06-30T02:15:21.077Z","modified":"2026-06-17T09:25:53.127Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-276","CWE-284"],"updated_at":"2026-11-02T14:11:15.754475Z"}]}}
