PT-2026-43021 · Acer · Acer Care Center
Published
2026-05-25
·
Updated
2026-06-04
·
CVE-2026-9490
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/RE:M |
Name of the Vulnerable Software and Affected Versions
Acer Care Center (affected versions not specified)
Description
The ACCSvc service creates a Named Pipe with a weak Security Descriptor. This allows an authenticated local user to connect and send a specially crafted message of type
0x03 to the pipe, resulting in a service crash with exit code 1067 (ERROR PROCESS ABORTED).Recommendations
Update the software to the latest version.
Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Acer Care Center