PT-2026-41432 · Iobit · Advanced Systemcare

Jair Amezcua · Published 2026-05-16 · Updated 2026-05-16 · CVE-2020-37232

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Advanced System Care Service version 13.0.0.157

Description An unquoted service path issue exists in the AdvancedSystemCareService13 service binary path. This allows local attackers to escalate privileges by placing malicious executables in the system root path, which are then executed with LocalSystem privileges during system reboot or service startup.

Recommendations For version 13.0.0.157, ensure the service binary path for AdvancedSystemCareService13 is properly quoted or restrict write access to the system root path to prevent the placement of unauthorized executables.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37232

Affected Products

Advanced Systemcare

References · 6

• 🔥 https://exploit-db.com/exploits/49049 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37232 · Security Note
• https://iobit.com · Note
• https://t.me/cveNotify/163752 · Telegram Post
• https://vulncheck.com/advisories/advanced-system-care-service-unquoted-service-path-privilege-escalation · Note
• https://iobit.com/es/advancedsystemcarepro.php · Note