Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local malicious user to potentially execute arbitrary code.
intel quartus prime