CVE-2026-15515 | A security vulnerability has been detected in Tencent PC Man… | CVSS 7.0 HIGH

Description

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metadata

CVE ID: CVE-2026-15515
State: PUBLISHED
Assigner: VulDB
Reserved: 2026-07-12 11:02 UTC
Published: 2026-07-13 00:00 UTC
Last updated: 2026-07-13 00:00 UTC
Primary CWE: CWE-427
Uncontrolled Search Path
Vendor / Product: Tencent / PC Manager
Sources: cve.org · NVD

Severity & Metrics

7.0 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

Affected products (1)

Vendor	Product	Platform	Versions
Tencent	PC Manager	—	18.1.30242.301

Weakness (CWE)

CWE	Source	Description
CWE-426	cna	Untrusted Search Path
CWE-427	cna	Uncontrolled Search Path

CVSS scores (4)

Score	Severity	Version	Source	Vector
7.3	HIGH	4.0	cna	CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
7.0	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
7.0	HIGH	3.0	cna	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
6.0	N/D	2.0	cna	AV:L/AC:H/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR

References (5)

VDB-377844 | Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path https://vuldb.com/vuln/377844
VDB-377844 | CTI Indicators (IOB, IOC, TTP, IOA) https://vuldb.com/vuln/377844/cti
CVE-2026-15515 | CVE Analysis and Report https://vuldb.com/cve/CVE-2026-15515
Submit #848643 | Tencent PC Manager 18,1,30242,301 Improper Access Controls https://vuldb.com/submit/848643
https://github.com/subsubsub1231/qmukiller