CVE-2020-37055CWE-428

SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path

High · published February 1, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

⚡ An unquoted service path might be a tiny blip on the radar, but it can let local users execute code with elevated privileges — a recipe for disaster! 🔥 Think of it like a restaurant without a clear menu; if a waiter can pick any dish to serve, they could sneak in something undesirable. An unquoted service path is that chaotic kitchen, where an attacker can drop in a malicious executable without proper checks! If exploited, a local attacker could run arbitrary code as an elevated user, leading to serious compromises of the system. Imagine someone taking over the kitchen and serving whatever they want to the unsuspecting diners — that could be devastating!

Put simply

Think of it like a restaurant without a clear menu; if a waiter can pick any dish to serve, they could sneak in something undesirable. An unquoted service path is that chaotic kitchen, where an attacker can drop in a malicious executable without proper checks! This vulnerability allows local users to exploit an unquoted service path in SpyHunter 4, enabling them to place malicious executables in specific directories that get executed with elevated system privileges when the service starts.

What to do

If exploited, a local attacker could run arbitrary code as an elevated user, leading to serious compromises of the system. Imagine someone taking over the kitchen and serving whatever they want to the unsuspecting diners — that could be devastating! To remediate this issue, ensure that all service paths are properly quoted and implement strict access controls on service directories. Additionally, consider auditing current permissions and updating to the latest version of SpyHunter that addresses this vulnerability. You've got this! Just follow these steps, and your system will be fortified in no time! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-02-01T14:38Z
EPSS history
Timeline
  • 01 FEB 14:38Z
    SpyHunter 4 - 'SpyHunter 4 Service' Unquoted Service Path
    cvelistv5