CVE-2026-9490 — Acer Care Center creates a Named Pipe with a weak Security Descriptor

CVE-2026-9490

Acer Care Center creates a Named Pipe with a weak Security Descriptor PUBLISHED

Description (CNA)

A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authenticated local user to connect and send a specially crafted message (message type 0x03) to the pipe, causing the service to crash with exit code 1067 (ERROR_PROCESS_ABORTED). To mitigate this potential local service disruption, Acer requires users to update the software to the latest version.

Affected (CNA)

Vendor / product	Versions
Acer / Care Center	affected 4.0 through 4.00.3058

CWE

CWE-269

References

https://community.acer.com/en/kb/articles/19668

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.