PT-2026-5000 · Wondershare · Wondershare Driver Install Service Help

Luis Sandoval · Published 2026-01-27 · Updated 2026-01-27 · CVE-2020-36977

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wondershare Driver Install Service (affected versions not specified)

Description The ElevationService executable contains an unquoted service path. This allows local attackers to replace the service binary with a malicious executable, potentially injecting malicious code and achieving privilege escalation to the LocalSystem account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-36977

Affected Products

Wondershare Driver Install Service Help

References · 5

• 🔥 https://exploit-db.com/exploits/49101 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36977 · Security Note
• https://wondershare.com/drfone · Note
• https://vulncheck.com/advisories/wondershare-driver-install-service-help-elevationservice-unquote-service-path · Note
• https://wondershare.com · Note