Vulnerability · Published Jan 27, 2026 · Assigned by VulnCheck

CVE-2020-36976Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path

High 7.8

In plain English

A high-severity security flaw in Global Registration Service from Acer. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.2%top 92.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Acer\Registration\ to inject malicious executables that would run with elevated LocalSystem privileges during service startup.

Affected products (as reported)

Vendor	Product	Versions
Acer	Global Registration Service	1.0.0.3

Weakness: CWE-428 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ExploitDB-49142 exploit
Acer Official Homepage product
VulnCheck Advisory: Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path third-party-advisory