EUVD-2026-81402
GHSA-33vx-6p3q-4jq6
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local authenticated user (AV:L/PR:L) abuses a privileged service for full SYSTEM compromise (C/I/A:H); scope kept Unchanged as this is standard in-OS privilege escalation.
Primary rating from Vendor (Acer).
CVSS VectorVendor: Acer
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications, potentially resulting in local privilege escalation.
AnalysisAI
Local privilege escalation in Acer System Monitoring, the privileged service bundled with NitroSense and PredatorSense on Acer Nitro and Predator gaming laptops, allows an authenticated local user to interact with the service and perform unauthorized registry modifications that can elevate privileges to SYSTEM. Exploitation requires an existing low-privileged foothold on the machine (PR:L) with no user interaction, and is limited to Acer gaming hardware running the vulnerable OEM software; there is no remote attack path. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the Acer System Monitoring privileged service (installed as part of NitroSense or PredatorSense on Acer Nitro/Predator gaming laptops) to be present and running, plus the attacker must already have local authenticated access as a low-privileged user (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a locally-exploitable privilege escalation with no confirmed real-world exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch with a specific fixed version is identified in the available data, so the immediate action is to consult Acer's advisory at https://community.acer.com/en/kb/articles/19877 and apply the latest NitroSense/PredatorSense update from the Acer support site for your exact laptop model as soon as one is offered. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Acer Nitro and Predator gaming laptops and determine which run Acer System Monitoring, NitroSense, or PredatorSense; verify EDR coverage, enable registry and service monitoring, and confirm no standard user has unnecessary local administrator rights. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in System Monitoring
View allLocal privilege escalation in Acer System Monitoring, a component bundled with NitroSense and PredatorSense on Acer Nitr
Acer System Monitoring, the WebSocket-enabled helper bundled with NitroSense and PredatorSense on Acer Nitro and Predato
Local authentication bypass in the Acer System Monitoring component bundled with NitroSense (Nitro laptops) and Predator
Local attackers can extract a hard-coded AES encryption key from the Acer System Monitoring component, which is bundled
Same weakness CWE-284 – Improper Access Control
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today