Tosibox Key Service 3.3.0 Local Privilege Escalation / Unquoted Service Path

Posted on 24 February 2024

Tosibox Key Service versions 3.3.0 and below suffer from an unquoted search path issue impacting the service Tosibox Key Service for Windows. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system.