← back
CVE-2020-36952

IObit Uninstaller 10 Pro - Unquoted Service Path

CVSS 8.5 HIGHEPSS 0.2%CWE-428
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Jan 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted service path in the IObit Uninstaller Service to insert malicious code that would execute with SYSTEM-level permissions during service startup.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Iobit · IObit Uninstaller

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/49371https://www.iobit.comhttps://www.vulncheck.com/advisories/iobit-uninstaller-pro-unquoted-service-path