Read the docs
TI-2026-75554 Aliases CVE-2026-96542GHSA-x5g7-wpj7-pfj2

EA Javelin Anticheat installer flaw allows local privilege escalation

Priority LOW 21CWE-732Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The standalone installer for EA Javelin Anticheat on Windows is affected in versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698. Incorrect permission assignment (CWE-732) lets a local non-administrative user modify the EAAntiCheatService service configuration and executable path. An attacker with local access can gain NT AUTHORITY\SYSTEM privileges, but only when the standalone installer is run manually, not through the EA App or Steam.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Description from the CNA

Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allows a local non-administrative user to elevate privileges to NT AUTHORITY\SYSTEM by modifying the EAAntiCheatService service configuration and executable path. This vulnerability requires non-standard manual execution of the standalone installer and does not affect standard game installations via the EA App and Steam. This issue is corrected in version 1.0.14940699 and later; service permissions automatically self-heal upon launching an integrated EA game title.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00083 0th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Electronic ArtsEA Javelin Anticheat (EA Javelin Anticheat Installer)1.0.14329371 (Specific affected standalone versions: 1.0.14329371, 1.0.14547437, 1.0.14789537, 1.0.14940698)—No fix listedCNA
  • EA Javelin Anticheat (EA Javelin Anticheat Installer) VendorElectronic Arts Affected 1.0.14329371 (Specific affected standalone versions: 1.0.14329371, 1.0.14547437, 1.0.14789537, 1.0.14940698) Fixed in — No fix listed CNA

Remediation

Update the EA Javelin Anticheat standalone installer to version 1.0.14940699 or later. Service permissions self-heal when an integrated EA game title is launched.

Written with Claude Haiku 5.5 from the sources below · 2026-10-28

Timeline

  1. 2026-10-18 Threatist record created from CVE-2026-96542
  2. 2026-10-18 Alias added: GHSA-x5g7-wpj7-pfj2
  3. 2026-10-19 CISA SSVC decision points changed

References

Advisory 1

  • TI-2004-00676 Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough… CVSS 2.0HIGH 7.5
  • TI-2007-04326 Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control… CVSS 2.0MEDIUM 6.8
  • TI-2003-01255 Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows… CVSS 2.0HIGH 7.5
  • TI-2006-03291 Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003… CVSS 2.0HIGH 7.8
  • TI-2004-01972 Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and… CVSS 2.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences