CVE-2021-47874highCWE-428

CVE-2021-47874: high-severity vulnerability in Vfsforgit VFS for Git

VFS for Git 1.0.21014.1 - 'GVFS.Service' Unquoted Service Path

Published · Updated

Follow this CVE+ Monitor VFS for Git

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.5epss 0.2%
VFS for Git 1.0.21014.1 contains an unquoted service path vulnerability in the GVFS.Service Windows service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path to inject malicious executables that will be launched with LocalSystem privileges during service startup or system reboot.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Vfsforgit · VFS for Git