CVE-2024-27674: Macro-Expert Macro Expert

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary.

Affected products

• Macro-Expert Macro Expert: up to and including 4.9.4

Published 2024-04-03. Last modified 2026-06-17.