CVEvulnerability
CVE-2020-36976
8.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.5 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-428
Description
Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Acer\Registration\ to inject malicious executables that would run with elevated LocalSystem privileges during service startup.
Related
Weakness · CWE (1)
- CWE-428 Unquoted Search Path or Element weakness
References
- https://www.acer.com/ac/en/US/content/home www.acer.com
- https://www.exploit-db.com/exploits/49142 www.exploit-db.com
- https://www.vulncheck.com/advisories/global-registration-service-gregsvcexe-unquoted-service-path www.vulncheck.com
- https://www.exploit-db.com/exploits/49142 www.exploit-db.com