EIP-2026-117714

This is a writeup describing an unquoted service path vulnerability in NVIDIA Update Service Daemon 1.0.21. The vulnerability could allow local privilege escalation if an attacker can place executable code in a path that the service attempts to run due to improper quoting.