← Database

CVE-2021-42563

HIGH CVSS: 7.8 Published: 2021-11-12 Modified: 2026-06-17

Description

There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.

Affected Platforms

Microsoft WindowsNi Ni Service Locator

Weakness Type

CWE-428

References