PT-2026-3834

Sandboxie Plus 0.7.2 contains an unquoted service path vulnerability in the SbieSvc service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem permissions durin...

PT-2026-3837

OKI Print Job Accounting 4.4.10 contains an unquoted service path vulnerability in the OkiJaSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:Program FilesOkidataPrint Job Accounting' to inject malicious executables and...

CVE-2021-47847

Disk Sorter Server 13.6.12 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Disk Sorter Server\bin\disksrs.exe' to inject malicious...

CVE-2021-47832

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate...

CVE-2021-47833 WifiHotSpot 1.0.0.0 - 'WifiHotSpotService.exe' Unquoted Service Path

WifiHotSpot 1.0.0.0 contains an unquoted service path vulnerability in its WifiHotSpotService.exe that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted path during system startup or reboot to inject and run malicious executables with LocalSystem...

CVE-2021-47832

CVE-2021-47832 entry is rejected/not used (duplicate) by the CVE Numbering Authority.

CVE-2021-47832

...

CVE-2021-47822

DiskBoss Service 12.2.18 has an unquoted service path vulnerability in diskbsa.exe, enabling local attackers to run code with elevated privileges during service startup. The root cause is an unquoted binary path in the service configuration, allowing a malicious executable placed in a search path...

CVE-2021-47805

Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries to inject malicious executables that will be run with elevated...

CVE-2021-47805

Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries to inject malicious executables that will be run with elevated...

CVE-2021-47792

Remote Mouse 4.002 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path in the RemoteMouseService to inject malicious executables and gain administrative access...

CVE-2020-36929

Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPAAgent services to inject malicious executables an...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004223 advisory. A race condition between hugetlb sysctl handlers in mm/hugetlb.c in the Linux kernel before 5.8.8 could be used by local attackers to corrupt memory, cause a NULL...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003973)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003973 advisory. A flaw was found in the Linux kernels iouring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalat...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001194 advisory. An issue was discovered in the Linux kernel before 4.8. Incorrect access checking in overlayfs mounts could be used by local attackers to modify or truncate files in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004154 advisory. In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001325 advisory. A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004104 advisory. A race condition in perfeventopen allows local attackers to leak sensitive data from setuid programs. As no relevant locks in particular the credguardmutex are held...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001295 advisory. The mincore implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001164)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001164 advisory. An issue was discovered in yurexread in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect...