CVE-2026-66839 | Medium | 6.7 | 2026-08-05 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacke… |
CVE-2026-18755 | High | 7.3 | 2026-08-04 | A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By p… |
CVE-2026-9128 | | | 2026-07-14 | A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable pa… |
CVE-2026-8864 | | | 2026-06-30 | The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released
to mitigate this p… |
CVE-2025-71326 | High | 7.8 | 2026-06-19 | AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with ele… |
CVE-2023-54353 | High | 7.8 | 2026-06-19 | Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attackers to execute arbitrary code by placin… |
CVE-2022-50971 | High | 7.8 | 2026-06-19 | Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local attackers to escalate privileges by injecting… |
CVE-2021-47985 | High | 7.8 | 2026-06-19 | Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Atta… |
CVE-2020-37254 | High | 7.8 | 2026-06-19 | Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the WsAppService Windows service. Local attackers… |
CVE-2020-37253 | High | 7.8 | 2026-06-19 | Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local attackers to escalate privileges. Attackers… |
CVE-2020-37252 | High | 7.8 | 2026-06-19 | Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by i… |
CVE-2020-37251 | High | 7.8 | 2026-06-19 | RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. A… |
CVE-2020-37250 | High | 7.8 | 2026-06-19 | TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that allows local attackers to execute arbitrary code… |
CVE-2019-25747 | High | 7.8 | 2026-06-19 | Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local attackers to escalate privileges by placing m… |
CVE-2016-20095 | High | 7.8 | 2026-06-19 | Matrix42 Remote Control Host 3.20.0031 contains an unquoted service path vulnerability in the FastViewerRemoteService and FastViewerRemoteProxy services that a… |
CVE-2016-20094 | High | 7.8 | 2026-06-19 | AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the servic… |
CVE-2016-20093 | High | 7.8 | 2026-06-19 | Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allo… |
CVE-2016-20092 | High | 7.8 | 2026-06-19 | NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that allows local users to execute arbitrary code wi… |
CVE-2016-20091 | High | 7.8 | 2026-06-19 | Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by inserting malicious exec… |
CVE-2016-20090 | High | 7.8 | 2026-06-19 | Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdater service due to an unquoted service path run… |
CVE-2016-20089 | High | 7.8 | 2026-06-19 | Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with SYSTEM privileges by exploiting the… |
CVE-2016-20088 | High | 7.8 | 2026-06-19 | Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater service that runs with SYSTEM privileges. A local a… |
CVE-2016-20087 | High | 7.8 | 2026-06-19 | Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated privileges by exploiting… |
CVE-2016-20086 | High | 7.8 | 2026-06-19 | Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer services that allows local attackers to esca… |
CVE-2016-20085 | High | 7.8 | 2026-06-19 | Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a… |
CVE-2026-25865 | High | 7.8 | 2026-06-18 | Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the… |
CVE-2021-47974 | High | 7.8 | 2026-05-16 | VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to esc… |
CVE-2020-37247 | High | 7.8 | 2026-05-16 | Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploi… |
CVE-2020-37232 | High | 7.8 | 2026-05-16 | Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows loca… |
CVE-2020-37231 | High | 7.8 | 2026-05-16 | Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by expl… |
CVE-2020-37230 | High | 7.8 | 2026-05-16 | Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privilege… |
CVE-2020-37229 | High | 7.8 | 2026-05-16 | OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by… |
CVE-2020-37223 | High | 7.8 | 2026-05-13 | IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYST… |
CVE-2021-47945 | High | 7.8 | 2026-05-10 | Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exp… |
CVE-2026-7280 | Medium | 6.7 | 2026-04-28 | AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a… |
CVE-2026-5789 | High | 7.8 | 2026-04-21 | Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileg… |
CVE-2016-20061 | High | 7.8 | 2026-04-04 | sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting th… |
CVE-2016-20060 | High | 7.8 | 2026-04-04 | Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injectin… |
CVE-2016-20059 | High | 7.8 | 2026-04-04 | IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalat… |
CVE-2016-20058 | High | 7.8 | 2026-04-04 | Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local at… |
CVE-2016-20057 | High | 7.8 | 2026-04-04 | NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate priv… |
CVE-2016-20056 | High | 7.8 | 2026-04-04 | Spy Emergency build 23.0.205 contains an unquoted service path vulnerability in the SpyEmrgHealth and SpyEmrgSrv services that allows local attackers to escala… |
CVE-2016-20055 | High | 7.8 | 2026-04-04 | IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to esca… |
CVE-2026-34768 | Low | 3.9 | 2026-04-04 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-be… |
CVE-2025-41359 | High | 7.8 | 2026-03-26 | Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps… |
CVE-2026-33253 | Medium | 6.7 | 2026-03-25 | SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory o… |
CVE-2017-20218 | High | 7.8 | 2026-03-16 | Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privilege… |
CVE-2026-25866 | High | 7.8 | 2026-03-09 | MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully… |
CVE-2026-26034 | High | 7.8 | 2026-03-05 | UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to e… |
CVE-2026-26033 | Medium | 6.7 | 2026-03-05 | UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with… |
CVE-2026-1585 | Medium | 6.7 | 2026-02-27 | An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a m… |
CVE-2026-2542 | High | 7.0 | 2026-02-16 | A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total… |
CVE-2019-25345 | High | 7.8 | 2026-02-12 | Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code. Atta… |
CVE-2019-25310 | High | 7.8 | 2026-02-11 | ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that allows local attackers to potentially e… |
CVE-2019-25309 | High | 7.8 | 2026-02-11 | Zilab Remote Console Server 3.2.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevat… |
CVE-2019-25308 | High | 7.8 | 2026-02-11 | Mikogo 5.2.2.150317 contains an unquoted service path vulnerability in the Mikogo-Service Windows service configuration. Attackers can exploit the unquoted pat… |
CVE-2019-25307 | High | 7.8 | 2026-02-11 | WorkgroupMail 7.5.1 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arb… |
CVE-2019-25306 | High | 7.8 | 2026-02-11 | BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privil… |
CVE-2026-24466 | Medium | 6.7 | 2026-02-09 | Products provided by Oki Electric Industry Co., Ltd. and its OEM products (Ricoh Co., Ltd., Murata Machinery, Ltd.) register Windows services with unquoted fil… |
CVE-2019-25305 | High | 7.8 | 2026-02-06 | JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running with LocalSystem privileges. Attackers can exploit the unquot… |
CVE-2019-25304 | High | 7.8 | 2026-02-06 | SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService that allows local users to potentially execute code with elev… |
CVE-2019-25302 | High | 7.8 | 2026-02-06 | Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code wit… |
CVE-2019-25293 | High | 7.8 | 2026-02-06 | BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially… |
CVE-2019-25292 | High | 7.8 | 2026-02-06 | Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevat… |
CVE-2019-25266 | High | 7.8 | 2026-02-06 | Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrar… |
CVE-2019-25288 | High | 7.8 | 2026-02-05 | Wacom WTabletService 6.6.7-3 contains an unquoted service path vulnerability that allows local attackers to execute malicious code with elevated privileges. At… |
CVE-2019-25287 | High | 7.8 | 2026-02-05 | Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially ex… |
CVE-2019-25286 | High | 7.8 | 2026-02-05 | GCafé 3.0 contains an unquoted service path vulnerability in the gbClientService that allows local attackers to potentially execute arbitrary code with elevate… |
CVE-2019-25285 | High | 7.8 | 2026-02-05 | Alps Pointing-device Controller 8.1202.1711.04 contains an unquoted service path vulnerability in the ApHidMonitorService that allows local attackers to execut… |
CVE-2019-25283 | High | 7.8 | 2026-02-05 | Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges… |
CVE-2019-25281 | High | 7.8 | 2026-02-05 | NCP Secure Entry Client 9.2 contains an unquoted service path vulnerability in multiple Windows services that allows local users to potentially execute arbitra… |
CVE-2019-25276 | High | 7.8 | 2026-02-05 | Studio 5000 Logix Designer 30.01.00 contains an unquoted service path vulnerability in the FactoryTalk Activation Service that allows local users to potentiall… |
CVE-2019-25275 | High | 7.8 | 2026-02-05 | BartVPN 1.2.2 contains an unquoted service path vulnerability in the BartVPNService that allows local attackers to potentially execute arbitrary code with elev… |
CVE-2019-25274 | High | 7.8 | 2026-02-05 | ProShow Producer 9.0.3797 contains an unquoted service path vulnerability in the ScsiAccess service that allows local attackers to potentially execute arbitrar… |
CVE-2019-25273 | High | 7.8 | 2026-02-05 | Easy-Hide-IP 5.0.0.3 contains an unquoted service path vulnerability in the EasyRedirect service that allows local attackers to potentially execute arbitrary c… |
CVE-2019-25272 | High | 7.8 | 2026-02-05 | TexasSoft CyberPlanet 6.4.131 contains an unquoted service path vulnerability in the CCSrvProxy service that allows local attackers to execute arbitrary code… |
CVE-2019-25271 | High | 7.8 | 2026-02-05 | NETGATE Data Backup 3.0.620 contains an unquoted service path vulnerability in its NGDatBckpSrv Windows service configuration. Attackers can exploit the unquot… |
CVE-2019-25269 | High | 7.8 | 2026-02-05 | Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inje… |
CVE-2019-25267 | High | 7.8 | 2026-02-05 | Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system pr… |
CVE-2020-37102 | High | 7.8 | 2026-02-03 | Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantService that allows local attackers to potentially execute arb… |
CVE-2020-37101 | High | 7.8 | 2026-02-03 | VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Att… |
CVE-2020-37100 | High | 7.8 | 2026-02-03 | Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privi… |
CVE-2020-37099 | High | 7.8 | 2026-02-03 | Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute a… |
CVE-2020-37098 | High | 7.8 | 2026-02-03 | Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privi… |
CVE-2019-25261 | High | 7.8 | 2026-02-03 | AnyDesk 5.4.0 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially inject malicious… |
CVE-2020-37064 | High | 7.8 | 2026-02-01 | EPSON EasyMP Network Projection 2.81 contains an unquoted service path vulnerability in the EMP_NSWLSV service that allows local users to potentially execute a… |
CVE-2020-37063 | High | 7.8 | 2026-02-01 | TFTP Turbo 4.6.1273 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges… |
CVE-2020-37062 | High | 7.8 | 2026-02-01 | DHCP Turbo 4.61298 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service… |
CVE-2020-37061 | High | 7.8 | 2026-02-01 | BOOTP Turbo 2.0.1214 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system pri… |
CVE-2020-37055 | High | 7.8 | 2026-02-01 | SpyHunter 4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Atta… |
CVE-2020-37048 | High | 7.8 | 2026-02-01 | Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code… |
CVE-2020-37047 | High | 7.8 | 2026-02-01 | Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code… |
CVE-2020-37045 | High | 7.8 | 2026-02-01 | Veritas NetBackup 7.0 contains an unquoted service path vulnerability in the NetBackup INET Daemon service that allows local users to potentially execute arbit… |
CVE-2020-37037 | High | 7.8 | 2026-02-01 | Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges… |
CVE-2025-36384 | High | 8.4 | 2026-01-30 | IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path ele… |
CVE-2020-37060 | High | 7.8 | 2026-01-30 | Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SY… |
CVE-2020-37059 | High | 7.8 | 2026-01-30 | Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system p… |
CVE-2020-37058 | High | 7.8 | 2026-01-30 | Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration. Local attackers can exploit the unquot… |
CVE-2020-37030 | High | 7.8 | 2026-01-30 | Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privil… |
CVE-2020-37021 | High | 7.8 | 2026-01-29 | 10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attack… |