CVE-2021-45975

In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.

• CWE-426

• https://acercsi.comBroken Link
• https://aptw.tf/2022/01/20/acer-care-center-privesc.htmlExploit, Third Party Advisory
• https://community.acer.com/en/kb/articles/14757-acer-care-center-requires-an-update-to-resolve-a-security-vulnerabilityVendor Advisory
• https://acercsi.comBroken Link
• https://aptw.tf/2022/01/20/acer-care-center-privesc.htmlExploit, Third Party Advisory
• https://community.acer.com/en/kb/articles/14757-acer-care-center-requires-an-update-to-resolve-a-security-vulnerabilityVendor Advisory

Published

Jan 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45967An issue was discovered in Pascom Cloud Phone System before …9.8
• CVE-2021-45968An issue was discovered in xmppserver jar in the XMPP Server…7.5
• CVE-2021-45969An issue was discovered in AhciBusDxe in Insyde InsydeH2O wi…8.2
• CVE-2021-45970An issue was discovered in IdeBusDxe in Insyde InsydeH2O wit…8.2
• CVE-2021-45971An issue was discovered in SdHostDriver in Insyde InsydeH2O …8.2
• CVE-2021-45972The giftrans function in giftrans 1.12.2 contains a stack-ba…7.1
• CVE-2021-45977JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021…9.8
• CVE-2021-45978Foxit PDF Reader and PDF Editor before 11.1 on macOS allow r…7.8
• CVE-2021-45979Foxit PDF Reader and PDF Editor before 11.1 on macOS allow r…7.8
• CVE-2021-45980Foxit PDF Reader and PDF Editor before 11.1 on macOS allow r…7.8
• CVE-2021-45981NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE…9.8
• CVE-2021-45982NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a …8.8