CVE-2020-36991CWE-428

ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path

High · published January 28, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

🚨 An unquoted service path in ShareMouse 5.0.43 could let local users execute arbitrary code with elevated system privileges—like giving unwanted access to a surprise guest! 🔥 Think of it as a hotel where the service staff never checks IDs—anyone could walk in, grab a key, and head straight to the penthouse suite. In this case, the service path leaves a door wide open for malicious executables to take the express elevator to full access. If exploited, an attacker could run arbitrary code with higher privileges, effectively taking control of the system. This means they could tamper with files, install malware, or even bypass security measures. It's a serious risk that could jeopardize sensitive data and system integrity.

Put simply

Think of it as a hotel where the service staff never checks IDs—anyone could walk in, grab a key, and head straight to the penthouse suite. In this case, the service path leaves a door wide open for malicious executables to take the express elevator to full access. This vulnerability arises from an unquoted service path which allows local users, who can place malicious executables in certain directories, to gain elevated access during service startup. Without proper path quoting, the system is tricked into executing unauthorized code.

What to do

If exploited, an attacker could run arbitrary code with higher privileges, effectively taking control of the system. This means they could tamper with files, install malware, or even bypass security measures. It's a serious risk that could jeopardize sensitive data and system integrity. To remediate this, update ShareMouse to the latest version immediately, ensuring that you are using a version beyond 5.0.43. Additionally, verify and quote all service paths to prevent unauthorized executable execution. You’ve got this! By following these steps, you can secure your system and keep those pesky intruders out! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00176 · 6.8th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-28T12:29Z
EPSS history
Timeline
  • 28 JAN 12:29Z
    ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Service Path
    cvelistv5