CVE-2019-18670

In the Quick Access Service QAAdminAgent.exe in Acer Quick Access V2.01.3000 through 2.01.3027 and V3.00.3000 through V3.00.3008, a REGULAR user can load an arbitrary unsigned DLL into the signed service's process, which is running as NT AUTHORITY\SYSTEM. This is a DLL Hijacking vulnerability...

CVE-2019-18670

CVE-2019-18670 describes a DLL hijacking vulnerability in Acer Quick Access. The affected component is the Quick Access Service (QAAdminAgent.exe) used by Acer Quick Access, with affected versions V2.01.3000–V2.01.3027 and V3.00.3000–V3.00.3008. The root cause is an uncontrolled search path eleme...