CVE-2021-47780

CVE-2021-47780 describes an unquoted service path vulnerability in Macro Expert 4.7, affecting the macro-expert and macro_expert products. This flaw allows a local attacker to achieve arbitrary code execution with elevated LocalSystem privileges by injecting malicious executables into the improperly configured service path. With a CVSS score of 7.8 (High), exploitation is considered low complexity and requires local access, but can lead to full compromise of confidentiality, integrity, and availability. While there are no known public exploits (Metasploit, Nuclei, ExploitDB) or evidence of active exploitation (KEV, Hot List), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.