Softros Systems vulnerabilities
Published CVEs affecting Softros Systems products: 2 record(s), with severity, exploitation and fixes.
CVE-2021-47890
High · 7.8
CWE-428 Jan 23, 2026
LogonExpert 8.1 - 'LogonExpertSvc' Unquoted Service Path
LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup.
CVE-2021-47889
High · 7.8
CWE-428 Jan 23, 2026
Softros LAN Messenger 9.6.4 - 'SoftrosSpellChecker' Unquoted Service Path
Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChecker service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files (x86)\Softros Systems\Softros Messenger\Spell Checker\' to inject malicious executables and escalate privileges.