A local privilege escalation vulnerability in ShareMouse 5.0.43 enables standard users to execute arbitrary code with SYSTEM privileges, posing a significant risk to host integrity.

This vulnerability is caused by an unquoted service path for the ShareMouse service, which allows a local user to place a malicious executable in a directory that the service path resolves to during startup. Because the service runs with LocalSystem privileges, the malicious code is executed with elevated authority.

Successful exploitation allows a local attacker to gain full administrative control over the affected system, potentially leading to total system compromise, data theft, or the installation of persistent malware. While the CVSS score of 7.8 reflects a High severity, the impact is localized to the host, though it remains a critical vector for lateral movement within a network once initial access is achieved.

Immediate Action: As no specific patch version is provided, administrators should restrict file system permissions on the directories identified in the service path to prevent unauthorized executable placement. If possible, consider disabling the service until the vendor provides a secure, quoted path update.

Proactive Monitoring: Monitor system logs for unauthorized service installations or modifications and track the execution of binaries originating from unexpected paths within the Program Files directory structure.

Compensating Controls: Implement strict endpoint privilege management to ensure standard users cannot modify sensitive system directories, which serves as a vital mitigation against unquoted path exploitation.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the Exploit-DB entry 48794.

Given the availability of public proof-of-concept code and the high impact of local privilege escalation, organizations using ShareMouse 5.0.43 must prioritize securing the service configuration. Administrators should manually verify service path quotes and enforce strict access controls on the application installation directories to neutralize this risk.