CVE-2020-36937
Published Jan 25, 2026Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attacke…
CWE archive
CWE-428 CVEs
Programmatic archive453 CVEs tagged with CWE-428 — 7 Critical, 363 High, 80 Medium, 3 Low, 0 Unrated.
CVE-2020-36936
Published Jan 25, 2026Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to inject malicious exec…
CVE-2020-36935
Published Jan 25, 2026KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configuration that allows local attackers to potentially execute arbitrary code. Attackers…
CVE-2020-36934
Published Jan 25, 2026Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute code with elevated pr…
CVE-2020-36933
Published Jan 25, 2026HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute…
CVE-2021-47898
Published Jan 23, 2026Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMP_UDSA service running with LocalSystem privileges. Attackers can exploit the unquoted path by p…
CVE-2021-47896
Published Jan 23, 2026PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDispatcher service that allows local attackers to potentially execute arbitrary co…
CVE-2021-47890
Published Jan 23, 2026LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place…
CVE-2021-47889
Published Jan 23, 2026Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. A…
CVE-2021-47887
Published Jan 21, 2026OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attacker…
CVE-2021-47886
Published Jan 21, 2026Pingzapper 2.3.1 contains an unquoted service path vulnerability in the PingzapperSvc service that allows local attackers to potentially execute arbitrary code. Attackers can expl…
CVE-2021-47884
Published Jan 21, 2026OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary co…
CVE-2021-47883
Published Jan 21, 2026Sandboxie Plus 0.7.2 contains an unquoted service path vulnerability in the SbieSvc service that allows local attackers to execute code with elevated privileges. Attackers can exp…
CVE-2021-47882
Published Jan 21, 2026FreeLAN 2.2 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to execute arbitrary code. Attackers can exploit the u…
CVE-2021-47880
Published Jan 21, 2026Realtek Wireless LAN Utility 700.1631 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attacker…
CVE-2021-47879
Published Jan 21, 2026eBeam Interactive Suite 3.6 contains an unquoted service path vulnerability in the eBeam Stylus Driver service that allows local users to potentially execute code with elevated pr…
CVE-2021-47878
Published Jan 21, 2026eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privile…
CVE-2021-47874
Published Jan 21, 2026VFS for Git 1.0.21014.1 contains an unquoted service path vulnerability in the GVFS.Service Windows service that allows local attackers to execute code with elevated privileges. A…
CVE-2021-47869
Published Jan 21, 2026Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA_Scheduler service that allows local users to potentially execute arbitrary code. Attac…
CVE-2021-47868
Published Jan 21, 2026WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attacker…
CVE-2021-47867
Published Jan 21, 2026WIN-PACK PRO4.8 contains an unquoted service path vulnerability in the ScheduleService that allows local users to potentially execute code with elevated system privileges. Attacke…
CVE-2021-47866
Published Jan 21, 2026WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated system privileges. Attac…
CVE-2021-47864
Published Jan 21, 2026OSAS Traverse Extension 11 contains an unquoted service path vulnerability in the TravExtensionHostSvc service running with LocalSystem privileges. Attackers can exploit the unquo…
CVE-2021-47863
Published Jan 21, 2026MacPaw Encrypto 1.0.1 contains an unquoted service path vulnerability in its Encrypto Service configuration that allows local attackers to potentially execute arbitrary code. Atta…
CVE-2021-47862
Published Jan 21, 2026Hi-Rez Studios 5.1.6.3 contains an unquoted service path vulnerability in the HiPatchService that allows local attackers to execute code with elevated privileges. Attackers can ex…
Showing 126-150 of 453 CVEsPage 6 of 19