CVEvulnerability

CVE-2023-53984

8.5 HIGH Published 2026-01-13 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2026-01-13
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 4.0 ([email protected]): 8.5 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected]): 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-428

Description

Clevo HotKey Clipboard 2.1.0.6 contains an unquoted service path vulnerability in the HKClipSvc service that allows local non-privileged users to potentially execute code with system privileges. Attackers can exploit the misconfigured service path to inject and execute arbitrary code by placing malicious executables in specific file system locations.

Weakness · CWE (1)

CWE-428 Unquoted Search Path or Element weakness

References

https://web.archive.org/web/20200713203236/https://www.clevo.com.tw/index-en.asp web.archive.org
https://www.exploit-db.com/exploits/51206 www.exploit-db.com
https://www.vulncheck.com/advisories/hotkey-clipboard-privilege-escalation-unquoted-service-path www.vulncheck.com

CVE-2023-53984

Description

Related

Weakness · CWE (1)

References