CVE-2026-50228 : 상세 정보

CVE-2026-50228

2026-09-23
08h17 +00:00
2026-09-25
13h15 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software (versions up to and including 5.2.63) on localhost TCP port 9993. Because Chromium remote debugging is enabled in the production application, the attacker can execute JavaScript in the privileged application context and achieve arbitrary code execution.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-489 Active Debug Code
The product is released with debugging code still enabled or active.

참고 자료