This vulnerability affects DeepCool DisplayService 1.2.12 and is caused by improper access controls related to the processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplayService.exe. An attacker with local access and low privileges can perform manipulations that exploit this weakness. The CVSS 4.0 base score is 8.5, reflecting high impact due to compromised confidentiality, integrity, and availability. The exploit is publicly known, but there is no vendor advisory or patch available at this time.

Successful exploitation allows a local attacker with limited privileges to bypass access controls, potentially leading to unauthorized actions affecting confidentiality, integrity, and availability of the affected system. The high CVSS score indicates significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to DeepCool DisplayService.