CVE-2023-53984 HIGH

CVE-2023-53984: HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Path

Vendor Clevo
Product HotKey Clipboard
Weakness CWE-428
Published January 13, 2026
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Clevo HotKey Clipboard 2.1.0.6 contains an unquoted service path vulnerability in the HKClipSvc service that allows local non-privileged users to potentially execute code with system privileges. Attackers can exploit the misconfigured service path to inject and execute arbitrary code by placing malicious executables in specific file system locations.

Key dates

02Disclosure timeline

January 13, 2026 CVE published
April 7, 2026 Record updated