CVE-2026-19192
Received Received - Intake

Improper Access Control in DeepCool DisplayService

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: VulDB

Description
A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. The exploit is now public and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-07
AI Q&A
2026-08-07
EPSS Evaluated
N/A
NVD
CVE-2026-19192
EUVD
EUVD-2026-54358

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
deepcool displayservice 1.2.12

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in DeepCool DisplayService 1.2.12 allows a local user with standard privileges to connect to an unauthenticated named-pipe control channel of a LocalSystem service. The service performs a JSON handshake and provides a per-session data pipe, enabling unauthorized interaction with privileged display-driver functions without proper authorization checks.

Detection Guidance

Check for the presence of DeepCoolDisplayService.exe in C:\DeepCool\resources\service\x64\. Verify if the service is running as LocalSystem and if unauthenticated named-pipe connections are possible. Use tools like Process Explorer to inspect service properties and named pipes.

Impact Analysis

A low-privileged user could exploit this to manipulate display settings, initialize drivers, or perform other privileged operations, potentially leading to unauthorized system changes or further attacks on the local machine.

Compliance Impact

This vulnerability may violate compliance requirements that mandate strict access controls for privileged services, such as GDPR's data integrity principles or HIPAA's security rules for protected health information systems.

Mitigation Strategies

Update DeepCool DisplayService to the latest version if available. Restrict local user access to the service and named pipes. Disable the service if not required. Monitor for unauthorized named-pipe connections.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19192. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart