CVE-2025-46014 Privilege escalation in n/a
Attackers can escalate privileges by exploiting insecure named pipe permissions in Honor PC Manager services.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-46014?
CVE-2025-46014 is a high-severity vulnerability in n/a, published on 30 Jun 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege escalation.
Which versions are affected by CVE-2025-46014?
It affects 1 product.
Products include Honor Pc Manager.
How do I fix CVE-2025-46014?
No fix has been published for CVE-2025-46014 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-46014 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-46014 exists.
Sources
Also known as GHSA-93ww-rvxc-x7gp.