VULNERABILITY INTELLIGENCE

CVE-2021-47787

CVSS score7.8 HIGH

EPSS probability0.25%

CISA KEVNot currently listed

Published2026-01-16

Last modified2026-10-06

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration.

Weakness classification

disclosure@vulncheck.com: CWE-428

Primary references

disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
disclosure@vulncheck.com — Product
disclosure@vulncheck.com — Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory, VDB Entry