CVE-2020-37223

Description

IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers can place a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restart the service to execute code with SYSTEM privileges.

Overview

State

—

Assigner (CNA)

—

CVSS severity

high

CVSS score

7.8 / 10

CVSS vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Effective score

7.8 / 10 HIGH source: CNA overview

CWE(s)

—

Reserved

—

Published

—

Last updated

—

Source

https://www.tenable.com/cve/CVE-2020-37223

Linked Threat

CVE-2020-37223 — CVE-2020-37223

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2026-05-13 16:16:33 UTC

NVD last modified

2026-05-13 17:07:21 UTC

NVD CVSS v3.1

7.8 / 10 HIGH source: disclosure@vulncheck.com

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability subscore

1.8 / 10

Impact subscore

5.9 / 10

EPSS score

0.0001 (probability of exploitation in next 30 days)

EPSS percentile

2.64% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD-assigned CWE(s): CWE-428 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2020-31224

Assigner

VulnCheck

Published

May 13, 2026, 2:22:34 PM

Updated

May 13, 2026, 6:20:26 PM

EUVD base score (CVSS 4.0)

8.5 / 10
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EUVD-reported EPSS

0.0100

Vendors

IObit

Products

IObit Uninstaller (9.5.0.15)

ENISA description: IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers can place a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restart the service to execute code with SYSTEM privileges.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (7)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://nvd.nist.gov/vuln/detail/CVE-2020-37223 tenable:nvd.nist.gov
• https://www.cve.org/CVERecord?id=CVE-2020-37223 tenable:www.cve.org
• https://www.exploit-db.com/exploits/48543 tenable:www.exploit-db.com
• https://www.first.org/epss/ tenable:www.first.org
• https://www.iobit.com tenable:www.iobit.com
• https://www.iobit.com/en/advanceduninstaller.php tenable:www.iobit.com
• https://www.vulncheck.com/advisories/iobit-uninstaller-unquoted-service-path-privilege-escalation tenable:www.vulncheck.com

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

• Security Updates - Red Hat Customer Portal
  web:access.redhat.com

  Learn about our open source products, services, and company. You are here

  2026-05-26 02:52 UTC
• CVEs and Security Vulnerabilities - OpenCVE
  web:app.opencve.io

  Explore the latest vulnerabilities and security issues in the CVE database

  2026-05-26 02:52 UTC
• Security Advisory Bulletin 064 | Ubiquiti Community
  web:community.ui.com

  Published: May 21, 2026 Updated: May 22, 2026 Version: 1.1 Revision: 1.1 Summary 1 of 5 A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. Affected Products: UniFi OS Server (Version 5.0.6 and earlier) Mitigation : Update your UniFi OS Server to Version 5.0.8 or later ...

  2026-05-26 02:52 UTC
• CVE Vault - CVE Database & Security Research Hub
  web:cvevault.com

  CVE Vault - Search and explore Common Vulnerabilities and Exposures ( CVE ) database. Find security vulnerabilities by CVE ID, vendor, severity, and year. Stay secure with comprehensive CVE information.

  2026-05-26 02:52 UTC
• Current Common Vulnerabilities and Exposures - Feedly
  web:feedly.com

  Welcome to Feedly CVEs — Research critical vulnerabilities ( CVEs ) with all the real-time and historical information you need to assess the risk to your organization. This free resource uses Feedly's AI to synthesize and analyze vulnerability information from across the web, including estimating CVSS scores up to 3 days before it's reported to the NVD.

  2026-05-26 02:52 UTC
• Security Update Guide - Microsoft
  web:msrc.microsoft.com

  The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

  2026-05-26 02:52 UTC
• Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find
  web:www.cvefind.com

  CVE Find is a real-time vulnerability database indexing 351 731 security flaws ( CVE ) from MITRE, NVD, CISA KEV, CWE and CAPEC. 1311 new CVEs were published in the last 7 days. Data aggregated from: MITRE Corporation ( CVE , CWE, CAPEC), National Vulnerability Database - NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).

  2026-05-26 02:52 UTC
• CVE: Common Vulnerabilities and Exposures
  web:www.cve.org

  At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  2026-05-26 02:52 UTC
• National Vulnerability Database | NIST
  web:www.nist.gov

  NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

  2026-05-26 02:52 UTC
• Critical Patch Updates, Critical Security Patch Updates ... - Oracle
  web:www.oracle.com

  Critical Security Patch Updates Critical Security Patch Updates provide security patches for supported Oracle on-premises products. A Critical Security Patch Update provides targeted, high-priority security fixes in a smaller, more focused format, making them easier to apply with minimal disruption.

  2026-05-26 02:52 UTC

Only Available for Registered Users. Sign in to view.