CVE-2022-50921

High CVSS: 8.5

WOW21 5.0.1.9 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem permissions during service startup.

Vendor

Wow21

Product

Wow21

CWE

CWE-428

Yayın Tarihi

2026-01-13 23:15:55

Güncelleme

2026-02-02 16:16:16

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-428 Wow21 HIGH Wow21 2026

Referanslar

https://web.archive.org/web/20220220170535/https://wow21.life/ https://www.exploit-db.com/exploits/50818 https://www.vulncheck.com/advisories/wow-service-wowservice-unquoted-service-path https://www.exploit-db.com/exploits/50818