CVE-2020-36936CWE-428

Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path

High · published January 25, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

⚡ An unquoted service path opens the door to trouble! An attacker can sneak in malicious files, gaining elevated privileges on your system. 😱 Think of it like a delivery driver not checking the house number on a package — if the address is fuzzy, they might drop it off anywhere, including into the wrong hands! With the ability to execute arbitrary code, an attacker could gain full control over the system, leading to disastrous consequences like data theft, system compromise, or worse. It’s like giving someone the keys to your digital kingdom — they could do anything!

Put simply

Think of it like a delivery driver not checking the house number on a package — if the address is fuzzy, they might drop it off anywhere, including into the wrong hands! This vulnerability in Magic Mouse 2 Utilities 2.20 allows attackers to exploit an unquoted service path configuration, enabling them to inject malicious executables into a trusted service. By placing a harmful file in the service path, attackers can elevate their privileges and run code with full system access.

What to do

With the ability to execute arbitrary code, an attacker could gain full control over the system, leading to disastrous consequences like data theft, system compromise, or worse. It’s like giving someone the keys to your digital kingdom — they could do anything! To protect your systems, update Magic Mouse Utilities to the latest version that addresses this vulnerability. Also, review service configurations to ensure they include quoted paths to prevent potential exploits. Regular audits can be your best defense! You've got this! Stay vigilant and keep your systems secure! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-25T14:01Z
EPSS history
Timeline
  • 25 JAN 14:01Z
    Magic Mouse 2 utilities 2.20 - 'magicmouse2service' Unquoted Service Path
    cvelistv5