CVE-2019-25302

CVE-2019-25302 describes an unquoted service path vulnerability in Acer Launch Manager 6.1.7600.16385, specifically within the DsiWMIService. This flaw allows a local attacker to achieve privilege escalation by inserting malicious code into the unquoted path, which would then execute with system-level permissions during service startup. Rated 7.8 HIGH on CVSS, this vulnerability has a low attack complexity and can lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.