PT-2026-43021 · Acer · Care Center

Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9490

Mitre

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/RE:M

A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authenticated local user to connect and send a specially crafted message (message type 0x03) to the pipe, causing the service to crash with exit code 1067 (ERROR PROCESS ABORTED). To mitigate this potential local service disruption, Acer requires users to update the software to the latest version.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-9490

Affected Products

Care Center

References · 1

• https://community.acer.com/en/kb/articles/19668 · Note