CVE-2026-19192: DeepCool DisplayService DeepCoolDisplayService.exe access control

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-07 · updated 2026-10-23
Weakness: CWE-266

Description

A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. The exploit is now public and may be used.

Affected products

DeepCool DisplayService: 1.2.12

References

https://vuldb.com/cve/CVE-2026-19192
https://vuldb.com/submit/864540
https://vuldb.com/vuln/386710
https://vuldb.com/vuln/386710/cti
https://winslow1984.com/books/cve-collection/page/deepcool-1212-displayservice-exposes-an-unauthenticated-localsystem-named-pipe-control-channel
https://winslow1984.com/books/cve-collection/page/deepcool-1212-displayservice-exposes-an-unauthenticated-localsystem-named-pipe-control-channel

Get alerted when CVE-2026-19192 or the next vulnerability affects your stack