CVE-2026-15515CWE-426CWE-427

Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path

High · published July 13, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00160 · 4.8th percentile
Weaknesses
CWE-426 · Untrusted Search Path; CWE-427 · Uncontrolled Search Path Element
Published
2026-07-13T00:00Z
EPSS history
Timeline
  • 13 JUL 00:00Z
    Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path
    cvelistv5