CVE Daily – Unquoted Service Path (High+Critical) https://cvedaily.com/pages/tags/service-path.html CVE Daily – Unquoted Service Path (High+Critical) en Wed, 03 Jun 2026 21:26:45 +0000 [High] CVE-2021-47974 – VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Sea... https://nvd.nist.gov/vuln/detail/CVE-2021-47974 https://nvd.nist.gov/vuln/detail/CVE-2021-47974 Sat, 16 May 2026 16:16:22 +0000 High CVE-2021-47974

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:\Program Files\VX Search to execute arbitrary code with LocalSystem privileges when services restart.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37247 – Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteServi... https://nvd.nist.gov/vuln/detail/CVE-2020-37247 https://nvd.nist.gov/vuln/detail/CVE-2020-37247 Sat, 16 May 2026 16:16:21 +0000 High CVE-2020-37247

Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37232 – Advanced System Care Service 13.0.0.157 contains an unquoted service path vulner... https://nvd.nist.gov/vuln/detail/CVE-2020-37232 https://nvd.nist.gov/vuln/detail/CVE-2020-37232 Sat, 16 May 2026 16:16:19 +0000 High CVE-2020-37232

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Attackers can place malicious executables in the system root path that will be executed with LocalSystem privileges during service startup or system reboot.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37231 – Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsv... https://nvd.nist.gov/vuln/detail/CVE-2020-37231 https://nvd.nist.gov/vuln/detail/CVE-2020-37231 Sat, 16 May 2026 16:16:19 +0000 High CVE-2020-37231

Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service startup process. Attackers can place malicious executables in the unquoted path directories to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37230 – Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in t... https://nvd.nist.gov/vuln/detail/CVE-2020-37230 https://nvd.nist.gov/vuln/detail/CVE-2020-37230 Sat, 16 May 2026 16:16:18 +0000 High CVE-2020-37230

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path. Attackers can insert a malicious executable into the service path and execute it with LocalSystem privileges when the service restarts or the system reboots.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37229 – OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in ... https://nvd.nist.gov/vuln/detail/CVE-2020-37229 https://nvd.nist.gov/vuln/detail/CVE-2020-37229 Sat, 16 May 2026 16:16:18 +0000 High CVE-2020-37229

OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unquoted path. Attackers can place a malicious executable in a directory within the service path that will execute with LocalSystem privileges when the service restarts or the system reboots.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37223 – IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in th... https://nvd.nist.gov/vuln/detail/CVE-2020-37223 https://nvd.nist.gov/vuln/detail/CVE-2020-37223 Wed, 13 May 2026 16:16:33 +0000 High CVE-2020-37223

IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers can place a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restart the service to execute code with SYSTEM privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47945 – Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in th... https://nvd.nist.gov/vuln/detail/CVE-2021-47945 https://nvd.nist.gov/vuln/detail/CVE-2021-47945 Sun, 10 May 2026 13:16:30 +0000 High CVE-2021-47945

Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2016-20061 – sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavP... https://nvd.nist.gov/vuln/detail/CVE-2016-20061 https://nvd.nist.gov/vuln/detail/CVE-2016-20061 Sat, 04 Apr 2026 14:16:18 +0000 High CVE-2016-20061

sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can insert a malicious executable in the unquoted path and trigger service restart or system reboot to execute code with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2016-20060 – Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshl... https://nvd.nist.gov/vuln/detail/CVE-2016-20060 https://nvd.nist.gov/vuln/detail/CVE-2016-20060 Sat, 04 Apr 2026 14:16:18 +0000 High CVE-2016-20060

Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious code executes with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2016-20059 – IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in t... https://nvd.nist.gov/vuln/detail/CVE-2016-20059 https://nvd.nist.gov/vuln/detail/CVE-2016-20059 Sat, 04 Apr 2026 14:16:18 +0000 High CVE-2016-20059

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2016-20058 – Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnera... https://nvd.nist.gov/vuln/detail/CVE-2016-20058 https://nvd.nist.gov/vuln/detail/CVE-2016-20058 Sat, 04 Apr 2026 14:16:18 +0000 High CVE-2016-20058

Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or system reboot to execute code with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2016-20057 – NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulner... https://nvd.nist.gov/vuln/detail/CVE-2016-20057 https://nvd.nist.gov/vuln/detail/CVE-2016-20057 Sat, 04 Apr 2026 14:16:18 +0000 High CVE-2016-20057

NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart or system reboot to execute code with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2016-20056 – Spy Emergency build 23.0.205 contains an unquoted service path vulnerability in ... https://nvd.nist.gov/vuln/detail/CVE-2016-20056 https://nvd.nist.gov/vuln/detail/CVE-2016-20056 Sat, 04 Apr 2026 14:16:18 +0000 High CVE-2016-20056

Spy Emergency build 23.0.205 contains an unquoted service path vulnerability in the SpyEmrgHealth and SpyEmrgSrv services that allows local attackers to escalate privileges by inserting malicious executables. Attackers can place executable files in the unquoted service path and trigger service restart or system reboot to execute code with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2016-20055 – IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability... https://nvd.nist.gov/vuln/detail/CVE-2016-20055 https://nvd.nist.gov/vuln/detail/CVE-2016-20055 Sat, 04 Apr 2026 14:16:17 +0000 High CVE-2016-20055

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2025-41359 – Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, ... https://nvd.nist.gov/vuln/detail/CVE-2025-41359 https://nvd.nist.gov/vuln/detail/CVE-2025-41359 Thu, 26 Mar 2026 13:16:25 +0000 High CVE-2025-41359

Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a higher priority directory, causing the service to execute the malicious file instead of the legitimate one. Exploit…

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25345 – Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulner... https://nvd.nist.gov/vuln/detail/CVE-2019-25345 https://nvd.nist.gov/vuln/detail/CVE-2019-25345 Thu, 12 Feb 2026 20:16:01 +0000 High CVE-2019-25345

Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service configuration to inject malicious executables and escalate privileges on the system.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25310 – ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability... https://nvd.nist.gov/vuln/detail/CVE-2019-25310 https://nvd.nist.gov/vuln/detail/CVE-2019-25310 Wed, 11 Feb 2026 15:16:09 +0000 High CVE-2019-25310

ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with elevated administrative privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25309 – Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2019-25309 https://nvd.nist.gov/vuln/detail/CVE-2019-25309 Wed, 11 Feb 2026 15:16:09 +0000 High CVE-2019-25309

Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be run with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25308 – Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikog... https://nvd.nist.gov/vuln/detail/CVE-2019-25308 https://nvd.nist.gov/vuln/detail/CVE-2019-25308 Wed, 11 Feb 2026 15:16:09 +0000 High CVE-2019-25308

Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific path locations.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25307 – WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windo... https://nvd.nist.gov/vuln/detail/CVE-2019-25307 https://nvd.nist.gov/vuln/detail/CVE-2019-25307 Wed, 11 Feb 2026 15:16:09 +0000 High CVE-2019-25307

WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25306 – BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability ... https://nvd.nist.gov/vuln/detail/CVE-2019-25306 https://nvd.nist.gov/vuln/detail/CVE-2019-25306 Wed, 11 Feb 2026 15:16:09 +0000 High CVE-2019-25306

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to insert malicious code that would execute with LocalSystem account permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25305 – JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbap... https://nvd.nist.gov/vuln/detail/CVE-2019-25305 https://nvd.nist.gov/vuln/detail/CVE-2019-25305 Fri, 06 Feb 2026 17:16:12 +0000 High CVE-2019-25305

JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privileges. Attackers can exploit the unquoted path containing spaces to inject and execute malicious code with elevated system permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25304 – SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the S... https://nvd.nist.gov/vuln/detail/CVE-2019-25304 https://nvd.nist.gov/vuln/detail/CVE-2019-25304 Fri, 06 Feb 2026 17:16:11 +0000 High CVE-2019-25304

SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\ISS\SecurOS\ to insert malicious code that would execute with system-level permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25302 – Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2019-25302 https://nvd.nist.gov/vuln/detail/CVE-2019-25302 Fri, 06 Feb 2026 17:16:11 +0000 High CVE-2019-25302

Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Launch Manager\dsiwmis.exe to insert malicious code that would execute with system-level permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25293 – BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2019-25293 https://nvd.nist.gov/vuln/detail/CVE-2019-25293 Fri, 06 Feb 2026 17:16:10 +0000 High CVE-2019-25293

BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25292 – Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2019-25292 https://nvd.nist.gov/vuln/detail/CVE-2019-25292 Fri, 06 Feb 2026 17:16:10 +0000 High CVE-2019-25292

Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\Apoint2K\HidMonitorSvc.exe to inject malicious executables and gain system-level access.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25266 – Wondershare Application Framework Service 2.4.3.231 contains an unquoted service... https://nvd.nist.gov/vuln/detail/CVE-2019-25266 https://nvd.nist.gov/vuln/detail/CVE-2019-25266 Fri, 06 Feb 2026 17:16:10 +0000 High CVE-2019-25266

Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific directory locations to hijack the service's execution context.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25288 – Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability tha... https://nvd.nist.gov/vuln/detail/CVE-2019-25288 https://nvd.nist.gov/vuln/detail/CVE-2019-25288 Thu, 05 Feb 2026 00:15:53 +0000 High CVE-2019-25288

Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute malicious code with elevated privileges. Attackers can insert an executable file in the service path to run unauthorized code when the service restarts or the system reboots.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25287 – Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vu... https://nvd.nist.gov/vuln/detail/CVE-2019-25287 https://nvd.nist.gov/vuln/detail/CVE-2019-25287 Thu, 05 Feb 2026 00:15:53 +0000 High CVE-2019-25287

Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Lavasoft\Web Companion\Application\ to inject malicious code that would execute with LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25286 – GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService... https://nvd.nist.gov/vuln/detail/CVE-2019-25286 https://nvd.nist.gov/vuln/detail/CVE-2019-25286 Thu, 05 Feb 2026 00:15:52 +0000 High CVE-2019-25286

GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be run with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25285 – Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path... https://nvd.nist.gov/vuln/detail/CVE-2019-25285 https://nvd.nist.gov/vuln/detail/CVE-2019-25285 Thu, 05 Feb 2026 00:15:52 +0000 High CVE-2019-25285

Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execute code with elevated privileges. Attackers can place a malicious executable in the service path and gain system-level access when the service restarts or the system reboots.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25283 – Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that... https://nvd.nist.gov/vuln/detail/CVE-2019-25283 https://nvd.nist.gov/vuln/detail/CVE-2019-25283 Thu, 05 Feb 2026 00:15:52 +0000 High CVE-2019-25283

Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can place malicious executables in the unquoted service path to gain elevated access during service startup or system reboot.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25281 – NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in m... https://nvd.nist.gov/vuln/detail/CVE-2019-25281 https://nvd.nist.gov/vuln/detail/CVE-2019-25281 Thu, 05 Feb 2026 00:15:52 +0000 High CVE-2019-25281

NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted paths in services like ncprwsnt, rwsrsu, ncpclcfg, and NcpSec to inject malicious code that would execute with LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25276 – Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerabil... https://nvd.nist.gov/vuln/detail/CVE-2019-25276 https://nvd.nist.gov/vuln/detail/CVE-2019-25276 Thu, 05 Feb 2026 00:15:52 +0000 High CVE-2019-25276

Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Rockwell Software\FactoryTalk Activation\ to inject malicious code that would execute with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25275 – BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNServ... https://nvd.nist.gov/vuln/detail/CVE-2019-25275 https://nvd.nist.gov/vuln/detail/CVE-2019-25275 Thu, 05 Feb 2026 00:15:52 +0000 High CVE-2019-25275

BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations to hijack the service's execution context.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25274 – ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the... https://nvd.nist.gov/vuln/detail/CVE-2019-25274 https://nvd.nist.gov/vuln/detail/CVE-2019-25274 Thu, 05 Feb 2026 00:15:51 +0000 High CVE-2019-25274

ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25273 – Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the Easy... https://nvd.nist.gov/vuln/detail/CVE-2019-25273 https://nvd.nist.gov/vuln/detail/CVE-2019-25273 Thu, 05 Feb 2026 00:15:51 +0000 High CVE-2019-25273

Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Easy-Hide-IP\rdr\EasyRedirect.exe' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25272 – TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in... https://nvd.nist.gov/vuln/detail/CVE-2019-25272 https://nvd.nist.gov/vuln/detail/CVE-2019-25272 Thu, 05 Feb 2026 00:15:51 +0000 High CVE-2019-25272

TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows local attackers to execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\TenaxSoft\CyberPlanet\SrvProxy.exe' to inject malicious executables and gain elevated system privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25271 – NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in i... https://nvd.nist.gov/vuln/detail/CVE-2019-25271 https://nvd.nist.gov/vuln/detail/CVE-2019-25271 Thu, 05 Feb 2026 00:15:51 +0000 High CVE-2019-25271

NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with LocalSystem privileges by placing executable files in specific directory locations.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25269 – Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its ... https://nvd.nist.gov/vuln/detail/CVE-2019-25269 https://nvd.nist.gov/vuln/detail/CVE-2019-25269 Thu, 05 Feb 2026 00:15:51 +0000 High CVE-2019-25269

Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25267 – Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allow... https://nvd.nist.gov/vuln/detail/CVE-2019-25267 https://nvd.nist.gov/vuln/detail/CVE-2019-25267 Thu, 05 Feb 2026 00:15:50 +0000 High CVE-2019-25267

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be launched with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37102 – Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability i... https://nvd.nist.gov/vuln/detail/CVE-2020-37102 https://nvd.nist.gov/vuln/detail/CVE-2020-37102 Tue, 03 Feb 2026 15:16:11 +0000 High CVE-2020-37102

Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37101 – VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows lo... https://nvd.nist.gov/vuln/detail/CVE-2020-37101 https://nvd.nist.gov/vuln/detail/CVE-2020-37101 Tue, 03 Feb 2026 15:16:10 +0000 High CVE-2020-37101

VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\VPN Unlimited\' to replace the service executable and gain elevated system privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37100 – Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability t... https://nvd.nist.gov/vuln/detail/CVE-2020-37100 https://nvd.nist.gov/vuln/detail/CVE-2020-37100 Tue, 03 Feb 2026 15:16:10 +0000 High CVE-2020-37100

Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations to hijack the service startup process.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37099 – Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in... https://nvd.nist.gov/vuln/detail/CVE-2020-37099 https://nvd.nist.gov/vuln/detail/CVE-2020-37099 Tue, 03 Feb 2026 15:16:10 +0000 High CVE-2020-37099

Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Savvy Enterprise\bin\disksvs.exe' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37098 – Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability t... https://nvd.nist.gov/vuln/detail/CVE-2020-37098 https://nvd.nist.gov/vuln/detail/CVE-2020-37098 Tue, 03 Feb 2026 15:16:10 +0000 High CVE-2020-37098

Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be launched with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2019-25261 – AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows ser... https://nvd.nist.gov/vuln/detail/CVE-2019-25261 https://nvd.nist.gov/vuln/detail/CVE-2019-25261 Tue, 03 Feb 2026 15:16:10 +0000 High CVE-2019-25261

AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious executables. Attackers can exploit the unquoted binary path to place malicious files in service executable locations, potentially gaining elevated system privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37064 – EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerabi... https://nvd.nist.gov/vuln/detail/CVE-2020-37064 https://nvd.nist.gov/vuln/detail/CVE-2020-37064 Sun, 01 Feb 2026 15:16:04 +0000 High CVE-2020-37064

EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\EPSON Projector\EasyMP Network Projection V2\ to inject malicious code that would execute with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37063 – TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows ... https://nvd.nist.gov/vuln/detail/CVE-2020-37063 https://nvd.nist.gov/vuln/detail/CVE-2020-37063 Sun, 01 Feb 2026 15:16:04 +0000 High CVE-2020-37063

TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will be launched with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37062 – DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows l... https://nvd.nist.gov/vuln/detail/CVE-2020-37062 https://nvd.nist.gov/vuln/detail/CVE-2020-37062 Sun, 01 Feb 2026 15:16:04 +0000 High CVE-2020-37062

DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can place malicious executables in the service path to gain elevated privileges when the service starts.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37061 – BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows... https://nvd.nist.gov/vuln/detail/CVE-2020-37061 https://nvd.nist.gov/vuln/detail/CVE-2020-37061 Sun, 01 Feb 2026 15:16:04 +0000 High CVE-2020-37061

BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted executable path to inject malicious code that will be executed when the service starts with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37055 – SpyHunter 4 contains an unquoted service path vulnerability that allows local us... https://nvd.nist.gov/vuln/detail/CVE-2020-37055 https://nvd.nist.gov/vuln/detail/CVE-2020-37055 Sun, 01 Feb 2026 15:16:04 +0000 High CVE-2020-37055

SpyHunter 4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations to gain elevated access during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37048 – Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service pa... https://nvd.nist.gov/vuln/detail/CVE-2020-37048 https://nvd.nist.gov/vuln/detail/CVE-2020-37048 Sun, 01 Feb 2026 15:16:03 +0000 High CVE-2020-37048

Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that would be run with the service's high-level system permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37047 – Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerabi... https://nvd.nist.gov/vuln/detail/CVE-2020-37047 https://nvd.nist.gov/vuln/detail/CVE-2020-37047 Sun, 01 Feb 2026 15:16:03 +0000 High CVE-2020-37047

Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicious code that would execute with LocalSystem permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37045 – Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the Net... https://nvd.nist.gov/vuln/detail/CVE-2020-37045 https://nvd.nist.gov/vuln/detail/CVE-2020-37045 Sun, 01 Feb 2026 15:16:03 +0000 High CVE-2020-37045

Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files\Veritas\NetBackup\bin\bpinetd.exe to inject malicious code that would execute with elevated LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37037 – Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that ... https://nvd.nist.gov/vuln/detail/CVE-2020-37037 https://nvd.nist.gov/vuln/detail/CVE-2020-37037 Sun, 01 Feb 2026 15:16:02 +0000 High CVE-2020-37037

Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem account permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37060 – Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in it... https://nvd.nist.gov/vuln/detail/CVE-2020-37060 https://nvd.nist.gov/vuln/detail/CVE-2020-37060 Fri, 30 Jan 2026 17:16:12 +0000 High CVE-2020-37060

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent system-level access.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37059 – Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allow... https://nvd.nist.gov/vuln/detail/CVE-2020-37059 https://nvd.nist.gov/vuln/detail/CVE-2020-37059 Fri, 30 Jan 2026 17:16:12 +0000 High CVE-2020-37059

Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can insert malicious executables in Program Files (x86) or system root directories to be executed with SYSTEM-level permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37058 – Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2020-37058 https://nvd.nist.gov/vuln/detail/CVE-2020-37058 Fri, 30 Jan 2026 17:16:11 +0000 High CVE-2020-37058

Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration. Local attackers can exploit the unquoted path to inject malicious code that will execute with elevated LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37030 – Outline Service 1.3.3 contains an unquoted service path vulnerability that allow... https://nvd.nist.gov/vuln/detail/CVE-2020-37030 https://nvd.nist.gov/vuln/detail/CVE-2020-37030 Fri, 30 Jan 2026 17:16:11 +0000 High CVE-2020-37030

Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in C:\Program Files (x86)\Outline to inject malicious code that would execute with LocalSystem permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37021 – 10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability ... https://nvd.nist.gov/vuln/detail/CVE-2020-37021 https://nvd.nist.gov/vuln/detail/CVE-2020-37021 Thu, 29 Jan 2026 15:16:09 +0000 High CVE-2020-37021

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attackers can place a malicious executable in specific file path locations to achieve privilege escalation to SYSTEM during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37020 – SonarQube 8.3.1 contains an unquoted service path vulnerability that allows loca... https://nvd.nist.gov/vuln/detail/CVE-2020-37020 https://nvd.nist.gov/vuln/detail/CVE-2020-37020 Thu, 29 Jan 2026 15:16:09 +0000 High CVE-2020-37020

SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by exploiting the service executable path. Attackers can replace the wrapper.exe in the service path with a malicious executable to execute code with highest system privileges during service restart.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37017 – CodeMeter 6.60 contains an unquoted service path vulnerability that allows local... https://nvd.nist.gov/vuln/detail/CVE-2020-37017 https://nvd.nist.gov/vuln/detail/CVE-2020-37017 Thu, 29 Jan 2026 15:16:09 +0000 High CVE-2020-37017

CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-37016 – BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows lo... https://nvd.nist.gov/vuln/detail/CVE-2020-37016 https://nvd.nist.gov/vuln/detail/CVE-2020-37016 Thu, 29 Jan 2026 15:16:09 +0000 High CVE-2020-37016

BarcodeOCR 19.3.6 contains an unquoted service path vulnerability that allows local attackers to execute code with elevated privileges during system startup. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that will run with LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36992 – Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvp... https://nvd.nist.gov/vuln/detail/CVE-2020-36992 https://nvd.nist.gov/vuln/detail/CVE-2020-36992 Wed, 28 Jan 2026 13:15:52 +0000 High CVE-2020-36992

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36991 – ShareMouse 5.0.43 contains an unquoted service path vulnerability that allows lo... https://nvd.nist.gov/vuln/detail/CVE-2020-36991 https://nvd.nist.gov/vuln/detail/CVE-2020-36991 Wed, 28 Jan 2026 13:15:52 +0000 High CVE-2020-36991

ShareMouse 5.0.43 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the insecure service path configuration by placing malicious executables in specific system directories to gain elevated access during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36990 – Input Director 1.4.3 contains an unquoted service path vulnerability in its Wind... https://nvd.nist.gov/vuln/detail/CVE-2020-36990 https://nvd.nist.gov/vuln/detail/CVE-2020-36990 Wed, 28 Jan 2026 13:15:52 +0000 High CVE-2020-36990

Input Director 1.4.3 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36989 – ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulne... https://nvd.nist.gov/vuln/detail/CVE-2020-36989 https://nvd.nist.gov/vuln/detail/CVE-2020-36989 Wed, 28 Jan 2026 13:15:51 +0000 High CVE-2020-36989

ForensiT AppX Management Service 2.2.0.4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute with LocalSystem account permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36987 – Program Access Controller 1.2.0.0 contains an unquoted service path vulnerabilit... https://nvd.nist.gov/vuln/detail/CVE-2020-36987 https://nvd.nist.gov/vuln/detail/CVE-2020-36987 Wed, 28 Jan 2026 13:15:51 +0000 High CVE-2020-36987

Program Access Controller 1.2.0.0 contains an unquoted service path vulnerability in PACService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36986 – Prey 1.9.6 contains an unquoted service path vulnerability that allows local use... https://nvd.nist.gov/vuln/detail/CVE-2020-36986 https://nvd.nist.gov/vuln/detail/CVE-2020-36986 Wed, 28 Jan 2026 13:15:51 +0000 High CVE-2020-36986

Prey 1.9.6 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the CronService to insert malicious code that would execute during application startup or system reboot.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36985 – IP Watcher 3.0.0.30 contains an unquoted service path vulnerability in its Windo... https://nvd.nist.gov/vuln/detail/CVE-2020-36985 https://nvd.nist.gov/vuln/detail/CVE-2020-36985 Wed, 28 Jan 2026 13:15:51 +0000 High CVE-2020-36985

IP Watcher 3.0.0.30 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with elevated LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36984 – EPSON 1.124 contains an unquoted service path vulnerability in the SENADB servic... https://nvd.nist.gov/vuln/detail/CVE-2020-36984 https://nvd.nist.gov/vuln/detail/CVE-2020-36984 Wed, 28 Jan 2026 13:15:50 +0000 High CVE-2020-36984

EPSON 1.124 contains an unquoted service path vulnerability in the SENADB service that allows local attackers to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\EPSON_P2B\Printer Software\Status Monitor\ to inject malicious executables that will run with LocalSystem permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36983 – Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability th... https://nvd.nist.gov/vuln/detail/CVE-2020-36983 https://nvd.nist.gov/vuln/detail/CVE-2020-36983 Tue, 27 Jan 2026 19:16:11 +0000 High CVE-2020-36983

Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup. Attackers can exploit the misconfigured service binary path to inject malicious executables with elevated LocalSystem privileges during system boot or service restart.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36982 – Motorola Device Manager 2.5.4 contains an unquoted service path vulnerability in... https://nvd.nist.gov/vuln/detail/CVE-2020-36982 https://nvd.nist.gov/vuln/detail/CVE-2020-36982 Tue, 27 Jan 2026 19:16:11 +0000 High CVE-2020-36982

Motorola Device Manager 2.5.4 contains an unquoted service path vulnerability in the MotoHelperService.exe service that allows local users to potentially inject malicious code. Attackers can exploit the unquoted path in the service configuration to execute arbitrary code with elevated system privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36981 – Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in... https://nvd.nist.gov/vuln/detail/CVE-2020-36981 https://nvd.nist.gov/vuln/detail/CVE-2020-36981 Tue, 27 Jan 2026 19:16:11 +0000 High CVE-2020-36981

Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in ForwardDaemon.exe to inject malicious code that will execute with elevated system privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36980 – SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its ... https://nvd.nist.gov/vuln/detail/CVE-2020-36980 https://nvd.nist.gov/vuln/detail/CVE-2020-36980 Tue, 27 Jan 2026 19:16:10 +0000 High CVE-2020-36980

SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted executable path to inject malicious files in the service binary path, enabling privilege escalation to system-level permissions.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36979 – Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vul... https://nvd.nist.gov/vuln/detail/CVE-2020-36979 https://nvd.nist.gov/vuln/detail/CVE-2020-36979 Tue, 27 Jan 2026 19:16:10 +0000 High CVE-2020-36979

Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path by placing malicious executables in the service path to gain elevated system privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36977 – Wondershare Driver Install Service contains an unquoted service path vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2020-36977 https://nvd.nist.gov/vuln/detail/CVE-2020-36977 Tue, 27 Jan 2026 19:16:10 +0000 High CVE-2020-36977

Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36976 – Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulne... https://nvd.nist.gov/vuln/detail/CVE-2020-36976 https://nvd.nist.gov/vuln/detail/CVE-2020-36976 Tue, 27 Jan 2026 19:16:10 +0000 High CVE-2020-36976

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Acer\Registration\ to inject malicious executables that would run with elevated LocalSystem privileges during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36975 – EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2020-36975 https://nvd.nist.gov/vuln/detail/CVE-2020-36975 Tue, 27 Jan 2026 19:16:10 +0000 High CVE-2020-36975

EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binary path. Attackers can leverage the unquoted path in 'C:\Program Files\Common Files\EPSON\EPW!3SSRP\E_S60RPB.EXE' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36974 – Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerabili... https://nvd.nist.gov/vuln/detail/CVE-2020-36974 https://nvd.nist.gov/vuln/detail/CVE-2020-36974 Tue, 27 Jan 2026 19:16:09 +0000 High CVE-2020-36974

Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in 'C:\Program Files\IDT\WDM\AESTSr64.exe' to inject malicious code that would execute during service startup or system reboot.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36959 – IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that all... https://nvd.nist.gov/vuln/detail/CVE-2020-36959 https://nvd.nist.gov/vuln/detail/CVE-2020-36959 Mon, 26 Jan 2026 18:16:26 +0000 High CVE-2020-36959

IDT PC Audio 1.0.6499.0 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted path in the STacSV service to inject malicious code that would execute with LocalSystem account permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36958 – Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteSe... https://nvd.nist.gov/vuln/detail/CVE-2020-36958 https://nvd.nist.gov/vuln/detail/CVE-2020-36958 Mon, 26 Jan 2026 18:16:26 +0000 High CVE-2020-36958

Kite 1.2020.1119.0 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Kite\KiteService.exe' to inject malicious executables and escalate privileges on the system.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36957 – PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its... https://nvd.nist.gov/vuln/detail/CVE-2020-36957 https://nvd.nist.gov/vuln/detail/CVE-2020-36957 Mon, 26 Jan 2026 18:16:26 +0000 High CVE-2020-36957

PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36953 – MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the ... https://nvd.nist.gov/vuln/detail/CVE-2020-36953 https://nvd.nist.gov/vuln/detail/CVE-2020-36953 Mon, 26 Jan 2026 18:16:25 +0000 High CVE-2020-36953

MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\MiniTool ShadowMaker\AgentService.exe' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36952 – IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that al... https://nvd.nist.gov/vuln/detail/CVE-2020-36952 https://nvd.nist.gov/vuln/detail/CVE-2020-36952 Mon, 26 Jan 2026 16:15:54 +0000 High CVE-2020-36952

IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted service path in the IObit Uninstaller Service to insert malicious code that would execute with SYSTEM-level permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36937 – Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the... https://nvd.nist.gov/vuln/detail/CVE-2020-36937 https://nvd.nist.gov/vuln/detail/CVE-2020-36937 Sun, 25 Jan 2026 14:15:48 +0000 High CVE-2020-36937

Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36936 – Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in ... https://nvd.nist.gov/vuln/detail/CVE-2020-36936 https://nvd.nist.gov/vuln/detail/CVE-2020-36936 Sun, 25 Jan 2026 14:15:48 +0000 High CVE-2020-36936

Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious executables and gain elevated system privileges by placing a malicious file in the service path.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36935 – KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service ... https://nvd.nist.gov/vuln/detail/CVE-2020-36935 https://nvd.nist.gov/vuln/detail/CVE-2020-36935 Sun, 25 Jan 2026 14:15:48 +0000 High CVE-2020-36935

KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\KMSpico\Service_KMS.exe to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36934 – Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerabi... https://nvd.nist.gov/vuln/detail/CVE-2020-36934 https://nvd.nist.gov/vuln/detail/CVE-2020-36934 Sun, 25 Jan 2026 14:15:48 +0000 High CVE-2020-36934

Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepNetworkService.exe to inject malicious code that would execute with LocalSystem permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2020-36933 – HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the Pa... https://nvd.nist.gov/vuln/detail/CVE-2020-36933 https://nvd.nist.gov/vuln/detail/CVE-2020-36933 Sun, 25 Jan 2026 14:15:47 +0000 High CVE-2020-36933

HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47898 – Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the... https://nvd.nist.gov/vuln/detail/CVE-2021-47898 https://nvd.nist.gov/vuln/detail/CVE-2021-47898 Fri, 23 Jan 2026 17:16:01 +0000 High CVE-2021-47898

Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMP_UDSA service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in intermediate directories to gain elevated system access.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47896 – PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerab... https://nvd.nist.gov/vuln/detail/CVE-2021-47896 https://nvd.nist.gov/vuln/detail/CVE-2021-47896 Fri, 23 Jan 2026 17:15:58 +0000 High CVE-2021-47896

PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in the service binary location to inject malicious executables that will be run with elevated LocalSystem privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47890 – LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpe... https://nvd.nist.gov/vuln/detail/CVE-2021-47890 https://nvd.nist.gov/vuln/detail/CVE-2021-47890 Fri, 23 Jan 2026 17:15:52 +0000 High CVE-2021-47890

LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47889 – Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in t... https://nvd.nist.gov/vuln/detail/CVE-2021-47889 https://nvd.nist.gov/vuln/detail/CVE-2021-47889 Fri, 23 Jan 2026 17:15:52 +0000 High CVE-2021-47889

Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Softros Systems\Softros Messenger\Spell Checker\' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47887 – OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability ... https://nvd.nist.gov/vuln/detail/CVE-2021-47887 https://nvd.nist.gov/vuln/detail/CVE-2021-47887 Wed, 21 Jan 2026 18:16:23 +0000 High CVE-2021-47887

OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Print Job Accounting\' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47886 – Pingzapper 2.3.1 contains an unquoted service path vulnerability in the Pingzapp... https://nvd.nist.gov/vuln/detail/CVE-2021-47886 https://nvd.nist.gov/vuln/detail/CVE-2021-47886 Wed, 21 Jan 2026 18:16:22 +0000 High CVE-2021-47886

Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Pingzapper\PZService.exe' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47884 – OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in... https://nvd.nist.gov/vuln/detail/CVE-2021-47884 https://nvd.nist.gov/vuln/detail/CVE-2021-47884 Wed, 21 Jan 2026 18:16:22 +0000 High CVE-2021-47884

OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Okidata\Common\extend3\portmgrsrv.exe' to inject malicious executables and escalate privileges.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]> [High] CVE-2021-47883 – Sandboxie Plus 0.7.2 contains an unquoted service path vulnerability in the Sbie... https://nvd.nist.gov/vuln/detail/CVE-2021-47883 https://nvd.nist.gov/vuln/detail/CVE-2021-47883 Wed, 21 Jan 2026 18:16:22 +0000 High CVE-2021-47883

Sandboxie Plus 0.7.2 contains an unquoted service path vulnerability in the SbieSvc service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem permissions during service startup.

CVSS: 7.8 · CWE: CWE-428

View on NVD

]]>