CVE-2020-36952

HIGH

IObit Uninstaller 10 Pro - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-36952. PoCs published by Mayur Parmar.

AI-analyzed exploit summary This is a writeup describing an unquoted service path vulnerability in IObit Uninstaller 10 Pro, which could allow local privilege escalation to SYSTEM if exploited. The document outlines the vulnerability, attack vector, and mitigation steps but does not include executable exploit code.

Description

IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted service path in the IObit Uninstaller Service to insert malicious code that would execute with SYSTEM-level permissions during service startup.

Exploits (1)

exploitdb WRITEUP
by Mayur Parmar · textlocalwindows
https://www.exploit-db.com/exploits/49371

This is a writeup describing an unquoted service path vulnerability in IObit Uninstaller 10 Pro, which could allow local privilege escalation to SYSTEM if exploited. The document outlines the vulnerability, attack vector, and mitigation steps but does not include executable exploit code.

Classification
Writeup 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Theoretical
Target: IObit Uninstaller 10 Pro
Auth required
Prerequisites: Local access to the system · Ability to write to the system root path · Vulnerable service running with SYSTEM privileges
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/49371
Various Sources product
https://www.iobit.com

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 4.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-428
Status published
Products (1)
Iobit/IObit Uninstaller 10
Published Jan 26, 2026
Tracked Since Feb 18, 2026