High severity7.8NVD Advisory· Published May 13, 2026· Updated May 13, 2026

CVE-2020-37223

Description

IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers can place a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restart the service to execute code with SYSTEM privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Iobit/Uninstallerllm-fuzzy
Range: =9.5.0.15

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48543nvd
www.iobit.comnvd
www.iobit.com/en/advanceduninstaller.phpnvd
www.vulncheck.com/advisories/iobit-uninstaller-unquoted-service-path-privilege-escalationnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000