CVE-2025-5491

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing remote users with low privileges to interact with it and access its features. One such feature enables the execution of arbitrary programs as NT AUTHORITY/SYSTEM. By leveraging this, remote attackers can execute arbitrary code on the target system with elevated privileges.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-549108.4Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-549117.3Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.CVE-2025-549127.8Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.CVE-2025-549137.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allow CVE-2025-549149.8Azure Networking Elevation of Privilege Vulnerability CVE-2025-549156.7Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate CVE-2025-549167.8Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.CVE-2025-549174.3Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.CVE-2025-549188.8Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.CVE-2025-549197.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized at CVE-2025-54928.8A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the functi CVE-2025-549208.8This issue affects Apache Spark: before 3.5.7 and 4.0.1. Users are recommended to upgrade to version 3.5.7 or 4.0.1 and above, which fixes t