Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-50920

Опубликовано: 13 янв. 2026
Источник: nvd
CVSS3: 8.4
EPSS Низкий

Описание

Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

EPSS

Процентиль: 2%
0.00013
Низкий

8.4 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 8.4
github
25 дней назад

Sandboxie-Plus 5.50.2 contains an unquoted service path vulnerability in the SbieSvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with LocalSystem privileges during service startup.

EPSS

Процентиль: 2%
0.00013
Низкий

8.4 High

CVSS3

Дефекты

CWE-428