{"id":"CVE-2021-45975","aliases":["EUVD-2021-32681","GHSA-wj79-qqhx-jqhr"],"status":"published","title":"In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading...","description":"In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00604,"percentile":0.49204,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-426"],"published":"2022-01-26T14:59:34Z","modified":"2026-06-17T04:14:20Z","products":[{"vendor":"acer","product":"care_center"}],"references":[{"url":"https://acercsi.com","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://community.acer.com/en/kb/articles/14757-acer-care-center-requires-an-update-to-resolve-a-security-vulnerability","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://aptw.tf/2022/01/20/acer-care-center-privesc.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45975"},{"url":"https://github.com/advisories/GHSA-wj79-qqhx-jqhr"}],"sources":{"cve":[{"id":"CVE-2021-45975","description":"In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.","status":"published","published":"2022-01-26T14:59:34Z","modified":"2024-08-04T04:54:31.09Z","updated_at":"2026-11-02T14:33:02.580561Z"}],"euvd":[{"id":"EUVD-2021-32681","description":"In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.","status":"published","published":"2022-01-26T14:59:34Z","modified":"2024-08-04T04:54:31Z","updated_at":"2026-11-03T03:08:25.222984Z"}],"ghsa":[{"id":"GHSA-wj79-qqhx-jqhr","title":"In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading...","description":"In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.","status":"published","published":"2022-01-27T00:01:13Z","modified":"2023-02-03T05:05:16Z","cwes":["CWE-426"],"updated_at":"2026-11-02T14:53:42.900002Z"}],"nvd":[{"id":"CVE-2021-45975","description":"In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with local administrator privileges.","status":"published","published":"2022-01-26T15:15:07.693Z","modified":"2026-06-17T04:14:20.97Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T14:07:03.821385Z"}]}}