CVE-2021-47861

The record

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be executed with LocalSystem account privileges during service startup.

Affected packages

Related vulnerabilities

• CVE-2026-97860 YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with… CWE-428
• CVE-2026-66839 NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted… CWE-428
• CVE-2026-18755 A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with… CWE-428
• CVE-2026-9128 A code execution security issue exists within Studio 5000 Logix Designer® due to an… CWE-428
• CVE-2026-8864 The HP Fan Control App might allow local escalation of privileges. CWE-428
• CVE-2020-37253 Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme… CWE-428
• CVE-2020-37252 Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in… CWE-428
• CVE-2020-37254 Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an… CWE-428