CVE-2025-13155
An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with
CVSS
7.8
High
EPSS
0.1%
p2
KEV
—
Exploit Today
1
0-100
Published: Dec 10, 2025 · Last modified: Oct 14, 2026 · CWE-276
0.1%EPSS · 30 days0.1%
2026-10-052026-11-02
An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-918957.1 HIG—
——0Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.20hCVE-2026-1070527.5 HIG29.2%
——9Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.4dCVE-2026-1141487.8 HIG29.2%
——9Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.4dCVE-2026-1123577.8 HIG2.5%
——1GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can replace the searchd.exe service binary used by the bundled KOFFIndexingService, which runs as LocalSystem, to execute arbitrary code with NT AUTHORITY\SYSTEM privileges upon the next service start or reboot.5dCVE-2026-1133457.8 HIG1.8%
——1Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.8dCVE-2026-1139517.8 HIG23.8%
——7If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.1d