CVE-2026-19192 is a vulnerability in DeepCool DisplayService 1.2.12 caused by improper access controls during processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. The flaw allows a local attacker with limited privileges to manipulate the service, potentially resulting in full compromise of confidentiality, integrity, and availability. The vulnerability is classified under CWE-266 (Improper Access Control). Exploit code is publicly available, increasing the risk of exploitation. No vendor advisory or patch information is currently provided.

Successful exploitation can lead to complete compromise of the affected system's confidentiality, integrity, and availability due to improper access controls. The attacker must have local access and limited privileges but can escalate or manipulate the service to cause significant damage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to DeepCool DisplayService. Avoid executing untrusted code or files in the DeepCool service directory.