EIP-2026-116982

This is a writeup describing an unquoted service path privilege escalation vulnerability in Comodo Dragon Browser's DragonUpdater service. The vulnerability allows a local attacker to execute arbitrary code with SYSTEM privileges by placing a malicious executable in the service path.