Acer Quick Access DLL Hijacking Vulnerability

Acer Quick Access is an application that allows you to quickly turn on or off individual wireless devices, change power off USB charging settings. Acer Quick Access suffers from a DLL hijacking vulnerability that can be exploited by an attacker to load and execute malicious payloads using a...

CVE-2019-18670

In the Quick Access Service QAAdminAgent.exe in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability...