CVE-2016-20055

HIGH

IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

Title source: cna
STIX 2.1

Description

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Amir.ght · textlocalwindows
https://www.exploit-db.com/exploits/40577

References (4)

Core 4
Core References
Exploit exploit
ExploitDB-40577
https://www.exploit-db.com/exploits/40577
Product product
Official Product Homepage
http://www.iobit.com/en/index.php
Product product
Product Reference
http://www.iobit.com/en/advancedsystemcarefree.php#
Third Party Advisory third-party-advisory
VulnCheck Advisory: IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation
https://www.vulncheck.com/advisories/iobit-advanced-systemcare-unquoted-service-path-privilege-escalation

Scores

CVSS v3 7.8
EPSS 0.0001
EPSS Percentile 3.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (2)
iobit/advanced_system_care < 10.0.2
Iobit/IObit Advanced SystemCare 10.0.2
Published Apr 04, 2026
Tracked Since Apr 04, 2026