CVE-2019-25287
HIGHAdaware Web Companion 4.8.2078.3950 - Code Injection
Title source: llmDescription
Adaware Web Companion version 4.8.2078.3950 contains an unquoted service path vulnerability in the WCAssistantService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Lavasoft\Web Companion\Application\ to inject malicious code that would execute with LocalSystem privileges during service startup.
Exploits (1)
exploitdb
WRITEUP
by Mariela L Martínez Hdez · textlocalwindows
https://www.exploit-db.com/exploits/47597
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
3.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-428
Status
draft
Timeline
Published
Feb 05, 2026
Tracked Since
Feb 18, 2026