Vulnerability · Published May 16, 2026 · Assigned by VulnCheck
CVE-2020-37232Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation
High 7.8
In plain English
A high-severity security flaw in Advanced System Care Service from Iobit. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 98.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Attackers can place malicious executables in the system root path that will be executed with LocalSystem privileges during service startup or system reboot.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Iobit | Advanced System Care Service | 13.0.0.157 |
Weakness: CWE-428 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-49049 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation third-party-advisory