High severity · published Jan 27, 2026
CVE-2020-36977
Wondershare Driver Install Service help 10.7.1.321 - 'ElevationService' Unquote Service Path
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling privilege escalation to LocalSystem account.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WD
Wondershare Driver Install Service help · Wondershare
10.7.1.321 · source: vendor
Affected product
WD
Wondershare Driver Install Service help
Wondershare
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-36977
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-36977
www.exploit-db.com
https://www.exploit-db.com/exploits/49101
www.vulncheck.com
https://www.vulncheck.com/advisories/wondershare-driver-install-service-help-elevationservice-unquote-service-path
www.wondershare.com
https://www.wondershare.com/
www.wondershare.com
https://www.wondershare.com/drfone/
