{"id":"CVE-2020-36977","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-36977","generatedAt":"2026-10-27T20:21:41.234Z","title":"Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code.","description":"Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.","published":"2026-01-27T19:16:10.000Z","lastModified":"2026-06-17T03:16:40.000Z","status":"Deferred","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":8.5,"severity":"HIGH","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-428"],"affected":[],"epss":{"score":0.0021,"percentile":0.11104,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.exploit-db.com/exploits/49101","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/wondershare-driver-install-service-help-elevationservice-unquote-service-path","source":"disclosure@vulncheck.com"},{"url":"https://www.wondershare.com/","source":"disclosure@vulncheck.com"},{"url":"https://www.wondershare.com/drfone/","source":"disclosure@vulncheck.com"},{"url":"https://www.exploit-db.com/exploits/49101","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-36977","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}