CVE-2022-27050: Bitcomet

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

BitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability which allows attackers to escalate privileges to the system level.

Affected products

• Bitcomet Bitcomet: before 1.86 (fixed in 1.86)

Published 2022-03-31. Last modified 2026-06-17.