Read the docs

Macro-Expert

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Macro-Expert records in CISA KEV

No Macro-Expert vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Macro Expert · all components

TI-2021-22396 CVE-2021-47780 · GHSA-mq6j-m5v8-2rmr

Macro Expert 4.7 - Unquoted Service Path

Priority HIGH 72

Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00247 Published 2026-01-15 No fix listed CWE-428
Priority LOW 36

Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0031 Published 2024-04-03 No fix listed CWE-276
Open these records in search →