Access Control Weakness in DeepCool DisplayService Affects User Security
CVE-2026-19192
8.5HIGH
Key Information:
- Vendor
Deepcool
- Status
- Vendor
- CVE Published:
- 7 August 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-19192?
A vulnerability exists in DeepCool DisplayService version 1.2.12 that allows for improper access controls related to the handling of the executable file DeepCoolDisplayService.exe. This flaw can be exploited locally, potentially enabling an attacker to manipulate the service and gain unauthorized access to sensitive functionalities. Prompt attention is required to address this security gap, as the exploit has been made publicly available.
Affected Version(s)
DisplayService 1.2.12
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
winslow1984 (VulDB User)