CVEvulnerability
CVE-2026-19190
7.1 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-08-07
- Last modified
- 2026-10-23
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 7.1 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-266, CWE-275
Description
A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-266 Incorrect Privilege Assignment weakness
References
- https://vuldb.com/cve/CVE-2026-19190 vuldb.com
- https://vuldb.com/submit/864538 vuldb.com
- https://vuldb.com/vuln/386708 vuldb.com
- https://vuldb.com/vuln/386708/cti vuldb.com
- https://winslow1984.com/books/cve-collection/page/stablebit-scanner-26134088-local-privilege-escalation-via-insecure-deserialization winslow1984.com