CVE-2026-1585
Medium · 6.7CVSS
6.7
EPSS
0.1%
Published
Feb 27, 2026
CISA due date
—
The record
An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-66839 NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted… CWE-428
- CVE-2026-18755 A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with… CWE-428
- CVE-2026-9128 A code execution security issue exists within Studio 5000 Logix Designer® due to an… CWE-428
- CVE-2020-37253 Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme… CWE-428
- CVE-2020-37252 Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in… CWE-428
- CVE-2020-37254 Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an… CWE-428
- CVE-2021-47985 Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint… CWE-428
- CVE-2022-50971 Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService… CWE-428