CVE-2020-36977

8.5 highEPSS 0.2%

High (8.5). EPSS 0.2% chance of exploitation in the next 30 days.

Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2026-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.exploit-db.com/exploits/49101
https://www.vulncheck.com/advisories/wondershare-driver-install-service-help-elevationservice-unquote-service-path
https://www.wondershare.com/
https://www.wondershare.com/drfone/
https://www.exploit-db.com/exploits/49101

Check your stack JSON