EIP-2026-118089

This is a technical writeup describing an unquoted service path privilege escalation vulnerability in Wacom Consumer Service. The vulnerability allows a local attacker to execute arbitrary code with SYSTEM privileges by placing a malicious executable in the service path.