PT-2026-2416 · Clevo · Clevo Hotkey Clipboard

Published 2026-01-13 · Updated 2026-01-14 · CVE-2023-53984

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Clevo HotKey Clipboard version 2.1.0.6

Description The Clevo HotKey Clipboard software version 2.1.0.6 has an issue with the HKClipSvc service. A misconfigured service path could allow local users without administrative privileges to potentially run code with system-level permissions. An attacker can exploit this by placing malicious executables in specific locations on the file system and injecting code.

Recommendations Apply a fix to properly quote the service path for the HKClipSvc service.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2023-53984

Affected Products

Clevo Hotkey Clipboard

References · 5

• 🔥 https://exploit-db.com/exploits/51206 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53984 · Security Note
• https://twitter.com/CVEnew/status/2011383046784655559 · Twitter Post
• https://web.archive.org/web/20200713203236/https://clevo.com.tw/index-en.asp · Note
• https://vulncheck.com/advisories/hotkey-clipboard-privilege-escalation-unquoted-service-path · Note