CVE-2024-27674

Macro Expert versions 4.9.4 and earlier are vulnerable to a Privilege Escalation flaw caused by incorrect default permissions (CWE-276). The directory %PROGRAMFILES(X86)% assSoft te Macro Expert grants BUILTIN Users excessive access, including Modify (M) permissions. A local unprivileged attacker...

CVE-2021-47780

Macro Expert 4.7 is affected by an unquoted service path vulnerability, enabling local users to potentially execute arbitrary code with LocalSystem privileges during service startup. Root cause: improperly configured service path. Impact is high (local exploit). Remediation: ensure the service pa...