CVE-2022-24286

CVE-2022-24286 concerns Acer QuickAccess vulnerable versions 2.01.300x–2.01.3030 and 3.00.30xx–3.00.3038. The root cause is a local privilege escalation via a named pipe: a user process communicates with a system-privileged service, and the pipe is granted read/write rights to ordinary users whil...