Skip to content
Noroxi

Acer records

56 published records for vendor acer.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
1.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 22
  4. 23
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

56 records
  • CVE-2006-6121
    41Plan

    Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    acer · lunchapp.aplunchNov 26, 2006

  • CVE-2012-2864
    41Plan

    Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Sam

    CriticalCVSS 10.0No exploitEPSS 4%

    google · chrome osAug 22, 2012

  • CVE-2026-49199
    41Plan

    Predator Connect W6x: RCE via MQTT

    CriticalCVSS 10.0No exploitEPSS 2%

    acer · predator connect w6x firmwareMay 29, 2026

  • CVE-2011-3420
    40Plan

    Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.157 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platform

    CriticalCVSS 10.0No exploitEPSS 0%

    google · chrome osSep 12, 2011

  • CVE-2011-3421
    40Plan

    Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.125 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platform

    CriticalCVSS 10.0No exploitEPSS 0%

    google · chrome osSep 12, 2011

  • CVE-2011-4548
    40Plan

    Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms

    CriticalCVSS 10.0No exploitEPSS 0%

    google · chrome osNov 24, 2011

  • CVE-2012-0695
    40Plan

    Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms

    CriticalCVSS 10.0No exploitEPSS 0%

    google · chrome osJan 12, 2012

  • CVE-2012-3290
    40Plan

    Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and C

    CriticalCVSS 10.0No exploitEPSS 0%

    google · chrome osJun 7, 2012

  • CVE-2011-4719
    40Plan

    Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.63 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms

    CriticalCVSS 10.0No exploitEPSS 0%

    google · chrome osDec 9, 2011

  • CVE-2012-1418
    40Plan

    Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.60 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms

    CriticalCVSS 10.0No exploitEPSS 0%

    google · chrome osFeb 29, 2012

  • CVE-2026-49200
    40Plan

    Acer Wave 7 router: Broken Access Control

    CriticalCVSS 10.0No exploitEPSS 0%

    acer · wave 7 firmwareMay 29, 2026

  • CVE-2026-49185
    40Plan

    Instruction Injection via FieldX MDM

    CriticalCVSS 10.0No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-49197
    40Plan

    Predator Connect W6x: Improper Authentication

    CriticalCVSS 10.0No exploitEPSS 0%

    acer · predator connect w6x firmwareMay 29, 2026

  • CVE-2026-49201
    40Plan

    Acer Wave 7 router: Hardcoded Cryptographic Key

    CriticalCVSS 10.0No exploitEPSS 0%

    acer · wave 7 firmwareMay 29, 2026

  • CVE-2022-41415
    39Monitor

    Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component.

    CriticalCVSS 9.8No exploitEPSS 1%

    acer · altos w2000h-w570h f4 firmwareOct 19, 2022

  • CVE-2009-2627
    38Monitor

    Insecure method vulnerability in the Acer LunchApp (aka AcerCtrls.APlunch) ActiveX control in acerctrl.ocx allows remote attackers to execut

    CriticalCVSS 9.3No exploitEPSS 4%

    acer · lunchapp.aplunchAug 19, 2009

  • CVE-2026-49190
    37Monitor

    Missing Per-Instruction Authorization Checks

    CriticalCVSS 9.4No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-49191
    37Monitor

    Exposed Hard-coded M3WebServer Backend API Key

    CriticalCVSS 9.3No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-49194
    37Monitor

    SCREEN_CLICK Authentication Bypass

    CriticalCVSS 9.4No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-50214
    37Monitor

    Shared Secret Quota Inflation

    CriticalCVSS 9.3No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-50209
    37Monitor

    MDM Server Registration Overriding

    CriticalCVSS 9.3No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-50208
    36Monitor

    Permissive TrustAllCerts TLS Verification

    CriticalCVSS 9.2No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-50211
    35Monitor

    Exposed Factory Testing App Boundaries

    HighCVSS 8.8No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-49202
    35Monitor

    Unverified Meeting Recording Endpoints & Permissive CORS

    HighCVSS 8.8No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026

  • CVE-2026-50225
    35Monitor

    Account Creation Exhaustion

    HighCVSS 8.8No exploitEPSS 0%

    acer · connect m6e 5g firmwareJun 4, 2026