Description
An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious file with the privileges of the affected service.
References (5)
Scores
CVSS v3
6.7
EPSS
0.0002
EPSS Percentile
3.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-428
Status
published
Products (1)
Canon Inc./IJ Scan Utility
1.1.2 - 1.5.0
Published
Feb 27, 2026
Tracked Since
Feb 27, 2026