This vulnerability arises from insufficient access controls in a privileged service within the Acer System Monitoring component included with NitroSense and PredatorSense software. An authenticated local user with limited privileges may access this service to modify the Windows registry without authorization. Such unauthorized registry modifications can lead to local privilege escalation, allowing the attacker to gain higher privileges on the affected system. The CVSS 4.0 base score is 7.4, reflecting a high severity with local attack vector, low attack complexity, no user interaction, and partial impacts on confidentiality, integrity, and availability.

An authenticated local user can exploit this vulnerability to perform unauthorized registry modifications, which may result in local privilege escalation. This could allow the attacker to gain elevated privileges on the affected system, potentially compromising system integrity and security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to the Acer System Monitoring service and monitor for unauthorized registry changes if possible.