CVE-2020-37232CWE-428

CVE-2020-37232

High · published May 16, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Attackers can place malicious executables in the system root path that will be executed with LocalSystem privileges during service startup or system reboot.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-05-16T20:16Z
References (4)
https://www.exploit-db.com/exploits/49049 · [email protected]https://www.iobit.com · [email protected]https://www.iobit.com/es/advancedsystemcarepro.php · [email protected]https://www.vulncheck.com/advisories/advanced-system-care-service-unquoted-service-path-privilege-escalation · [email protected]
EPSS history
Timeline
  • 16 MAY 15:25Z
    Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation
    cvelistv5