en
Acer is a global technology company that develops, sells, and supports computers, displays, peripherals, software, and related services. Its offerings serve consumers, businesses, schools, creators, and gamers, and are delivered through hardware products, bundled utilities, support services, and broader technology solutions.
As of 09/16/2026, Acer recorded 2 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Planet9 background service had the most security vulnerabilities in the Acer ecosystem, with 1 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-50602Planet9 Incorrect Permission Assignment Vulnerability Information | Exploitation statusNot known exploited | FixYes | Affected productPlanet9 background service | Published08/17/2026 | SeverityHigh |
CVE-2026-50601Planet9 Hardcoded Credentials Vulnerability Information | Exploitation statusNot known exploited | FixYes | Affected productPlanet9 desktop application | Published08/17/2026 | SeverityMedium |
CVE-2026-9789NitroSense V3: Security Vulnerability Information | Exploitation statusNot known exploited | FixYes | Affected productNitrorSense V3 | Published05/28/2026 | SeverityHigh |
CVE-2026-9490Acer Care Center creates a Named Pipe with a weak Security Descriptor | Exploitation statusNot known exploited | FixYes | Affected productCare Center | Published05/25/2026 | SeverityMedium |
CVE-2026-9489NitroSense V3: Local Privilege Escalation (LPE) vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNitrorSense V3 | Published05/25/2026 | SeverityHigh |
CVE-2026-8069PredatorSense V3: Local Privilege Escalation (LPE) vulnerability | Exploitation statusNot known exploited | FixYes | Affected productPredatorSense V3 | Published05/08/2026 | SeverityHigh |
CVE-2019-25302Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' Unquoted Service Path | Exploitation statusPublic exploit | FixNot confirmed | Affected productLaunch Manager | Published02/06/2026 | SeverityHigh |
CVE-2020-36976Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path | Exploitation statusPublic exploit | FixNot confirmed | Affected productGlobal Registration Service | Published01/27/2026 | SeverityHigh |
CVE-2021-47826Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.exe' Unquoted Service Path | Exploitation statusPublic exploit | FixNot confirmed | Affected productAcer Backup Manager Module | Published01/16/2026 | SeverityHigh |
CVE-2021-47825Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service Path | Exploitation statusPublic exploit | FixNot confirmed | Affected productAcer Updater Service | Published01/16/2026 | SeverityHigh |
CVE-2021-47823ePowerSvc 6.0.3008.0 - 'ePowerSvc.exe' Unquoted Service Path | Exploitation statusPublic exploit | FixNot confirmed | Affected productePowerSvc | Published01/16/2026 | SeverityHigh |
CVE-2025-14305Acer｜ListCheck.exe - Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productListCheck.exe | Published12/17/2025 | SeverityHigh |
CVE-2025-5491Acer ControlCenter - Remote Code Execution | Exploitation statusNot known exploited | FixYes | Affected productControlCenter | Published06/13/2025 | SeverityHigh |
CVE-2024-8105Insecure Platform Key (PK) used in UEFI system firmware signature | Exploitation statusPublic exploit | FixYes | Affected productvz2694g | Published08/26/2024 | SeverityMedium |
CVE-2022-4020Acer Aspire BIOS vulnerability | Exploitation statusNot known exploited | FixYes | Affected productAspire A315-22 | Published11/28/2022 | SeverityHigh |
CVE-2022-24285 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/08/2022 | SeverityUnknown |
CVE-2022-24286 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/08/2022 | SeverityUnknown |
CVE-2021-45975 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/26/2022 | SeverityUnknown |
CVE-2019-18670 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/17/2019 | SeverityUnknown |
CVE-2016-5648 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/08/2017 | SeverityUnknown |
CVE-2012-3290 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/07/2012 | SeverityUnknown |
CVE-2012-1418 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/29/2012 | SeverityUnknown |
CVE-2012-0695 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/12/2012 | SeverityUnknown |
CVE-2011-4719 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/09/2011 | SeverityUnknown |
CVE-2011-4548 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/24/2011 | SeverityUnknown |
CVE-2011-3420 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/10/2011 | SeverityUnknown |
CVE-2011-3421 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/10/2011 | SeverityUnknown |
CVE-2009-2627 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/19/2009 | SeverityUnknown |
CVE-2006-6121 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/26/2006 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
