CVE-2019-12176

CVE-2019-12176 describes a privilege escalation vulnerability affecting the "HTC Account Service" and "ViveportDesktopService" in HTC VIVEPORT versions prior to 1.0.0.36. A local attacker can exploit this by reconfiguring either service to achieve SYSTEM-level privileges. This vulnerability carries a CVSS v3 score of 7.8 (High), indicating a high impact on confidentiality, integrity, and availability with low attack complexity and requiring local user privileges. While the EPSS score is very low, suggesting minimal exploitability in the wild, there is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.