CVE-2021-47780

HIGH 7.8CVE-2021-47780 · Published 16/01/2026 · updated 17/06/2026

In short

CVE-2021-47780 is a HIGH (CVSS 7.8) vulnerability affecting macro expert (macro-expert).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
macro expert macro-expert	`= 4.7`	No fix yet

Description

Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the improperly configured service path to inject malicious executables that will be run with LocalSystem permissions during service startup.

References

macro-expert.com · Product
exploit-db.com/exploits/50431 · Exploit
vulncheck.com/advisories/macro-expert-unquoted-service-path · Third Party Advisory

More vulnerabilities in macro expert

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free