Care Center
Monthly
Acer Care Center's ACCSvc service exposes a Named Pipe with an insufficiently restrictive Security Descriptor, enabling any authenticated local user to crash the service by sending a crafted IPC message of type 0x03, resulting in process termination with ERROR_PROCESS_ABORTED (exit code 1067). Versions 4.0 up to and including 4.00.3058 are confirmed affected. No public exploit has been identified at time of analysis; EPSS probability stands at 0.01% (2nd percentile), SSVC classifies exploitation as none, and there is no CISA KEV listing - placing this firmly in the low operational priority tier despite the Medium CVSS score.
Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Acer Care Center's ACCSvc service exposes a Named Pipe with an insufficiently restrictive Security Descriptor, enabling any authenticated local user to crash the service by sending a crafted IPC message of type 0x03, resulting in process termination with ERROR_PROCESS_ABORTED (exit code 1067). Versions 4.0 up to and including 4.00.3058 are confirmed affected. No public exploit has been identified at time of analysis; EPSS probability stands at 0.01% (2nd percentile), SSVC classifies exploitation as none, and there is no CISA KEV listing - placing this firmly in the low operational priority tier despite the Medium CVSS score.
Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.