CVE-2022-24286

Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named Pipe is also given Read and Write rights to the general user. In addition, the service program does not verify the user when communicating. A thread may exist with a specific command. When the path of the program to be executed is sent, there is a local privilege escalation in which the service program executes the path with system privileges.

• CWE-287

• https://community.acer.com/en/kb/articles/14762Mitigation, Vendor Advisory
• https://community.acer.com/en/kb/articles/14762Mitigation, Vendor Advisory

Published

Mar 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24279The package madlib-object-utils before 0.1.8 are vulnerable …7.5
• CVE-2022-2428A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE…7.3
• CVE-2022-24280Improper Input Validation vulnerability in Proxy component o…6.5
• CVE-2022-24281A vulnerability has been identified in SINEC NMS (All versio…7.2
• CVE-2022-24282A vulnerability has been identified in SINEC NMS (All versio…7.2
• CVE-2022-24285Acer Care Center 4.00.30xx before 4.00.3042 contains a local…7.8
• CVE-2022-24287A vulnerability has been identified in SIMATIC PCS 7 V8.2 (A…7.8
• CVE-2022-24288In Apache Airflow, prior to version 2.2.4, some example DAGs…8.8
• CVE-2022-24289Hessian serialization is a network protocol that supports ob…8.8
• CVE-2022-2429The Ultimate SMS Notifications for WooCommerce plugin for Wo…8
• CVE-2022-24290A vulnerability has been identified in Teamcenter V12.4 (All…7.5
• CVE-2022-24291Certain HP Print devices may be vulnerable to potential info…7.5