Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-0539

Local Privilege Escalation in pcvisit service client

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all versions after 22.6.22.1329 and was fixed in 25.12.3.1745.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pcvisit pcvisit Remote Host Modul

Default version status: unknown

  • 22.6.22.1329 to < 25.12.3.1745affected
  • 0 to < 22.6.22.1329unaffected
  • 25.12.3.1745unaffected

References