High severity7.8NVD Advisory· Published Apr 4, 2026· Updated Apr 16, 2026

CVE-2016-20061

Description

sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can insert a malicious executable in the unquoted path and trigger service restart or system reboot to execute code with LocalSystem privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Symantec/Norton Antivirusllm-fuzzy
Range: = 2.3

Patches

Vulnerability mechanics

References

dl.sheedantivirus.ir/setup.exenvd
sheedantivirus.irnvd
www.exploit-db.com/exploits/40497nvd
www.vulncheck.com/advisories/sheed-antivirus-unquoted-service-path-privilege-escalationnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000