CVE-2016-20091CWE-428

CVE-2016-20091

High · published June 19, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by inserting malicious executables in the service path. Attackers can place executable files in unquoted path directories that the wfcs.exe service will execute with LocalSystem privileges upon service restart or system reboot.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.3th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-06-19T19:16Z
References (3)
http://www.binisoft.org · [email protected]https://www.exploit-db.com/exploits/40443 · [email protected]https://www.vulncheck.com/advisories/windows-firewall-control-unquoted-service-path-privilege-escalation · [email protected]
EPSS history
Timeline
  • 19 JUN 14:16Z
    Windows Firewall Control 4.8.6.0 Unquoted Service Path Privilege Escalation
    cvelistv5