CVE-2016-20093CWE-428

CVE-2016-20093

High · published June 19, 2026

CVSS v3.1

7.8

EPSS

Percentile

6.6

In the wild

Unconfirmed

What it is

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that execute during service startup or system reboot with elevated privileges.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00175 · 6.6th percentile
Weakness: CWE-428 · Unquoted Search Path or Element
Published: 2026-06-19T19:16Z

References (4)

http://www.wisecleaner.com · [email protected]http://www.wisecleaner.com/wise-disk-cleaner.html · [email protected]https://www.exploit-db.com/exploits/40417 · [email protected]https://www.vulncheck.com/advisories/wise-care-365-and-wise-disk-cleaner-unquoted-service-path-privilege-escalation · [email protected]

EPSS history

Timeline

19 JUN 14:16Z
Wise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege Escalation
cvelistv5