Vulnerability · Published Jan 13, 2026 · Assigned by VulnCheck
CVE-2022-50808CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path
High 8.4
In plain English
A high-severity uncontrolled search path in Cooler Master MasterPlus from Cooler Master Technology Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.2%top 95.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system reboot.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cooler Master Technology Inc. | Cooler Master MasterPlus | 1.8.5 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-51159 exploit
- CoolerMaster MasterPlus Official Homepage product
- VulnCheck Advisory: CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path third-party-advisory