CVE-2021-47822

DiskBoss Service 12.2.18 has an unquoted service path vulnerability in diskbsa.exe, enabling local attackers to run code with elevated privileges during service startup. The root cause is an unquoted binary path in the service configuration, allowing a malicious executable placed in a search path...