VULNERABILITY INTELLIGENCE

CVE-2021-42563

CVSS score7.8 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2021-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.

Weakness classification

  • nvd@nist.gov: CWE-428

Primary references