CVE-2021-3721 Denial of service in PCManager

What is CVE-2021-3721?

CVE-2021-3721 is a medium-severity denial of service vulnerability in Lenovo PCManager, published on 22 Apr 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an attacker with local access to trigger a blue screen error.

Weakness: CWE-787

Which versions are affected by CVE-2021-3721?

It affects 1 product.

Products include Lenovo Pcmanager.

How do I fix CVE-2021-3721?

No fix has been published for CVE-2021-3721 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2021-3721 being exploited?

There is no known exploitation of CVE-2021-3721 in the wild and no public exploit code.

Other vulnerabilities in Lenovo PCManager

• CVE-2025-10581 Privilege escalation in PC Manager High 8.5
• CVE-2025-8486 Privilege escalation in PC Manager High 8.5
• CVE-2025-8098 Privilege escalation in PC Manager High 8.5
• CVE-2025-2501 Privilege escalation in PC Manager High 8.5
• CVE-2025-2502 Privilege escalation in PC Manager High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j8c3-7w65-qf2g.