CVE-2020-37232: Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation

Published May 16, 2026

Updated

Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Attackers can place malicious executables in the system root path that will be executed with LocalSystem privileges during service startup or system reboot.

Affected Software

1 affected component

IObit Advanced SystemCare=13.0.0.157

Event History

May 16, 2026

CVE Published

via MITRE·03:25 PM

Data Sourced

via MITRE·03:25 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-37232?

CVE-2020-37232 has a high severity rating due to its ability to allow local attackers to escalate privileges.

How do I fix CVE-2020-37232?

To fix CVE-2020-37232, ensure that the service path for Advanced System Care is properly quoted to prevent privilege escalation.

Who is affected by CVE-2020-37232?

CVE-2020-37232 specifically affects users of IObit Advanced System Care version 13.0.0.157.

Can CVE-2020-37232 be exploited remotely?

No, CVE-2020-37232 can only be exploited locally by attackers with access to the affected system.

What type of vulnerability is CVE-2020-37232?

CVE-2020-37232 is classified as an unquoted service path vulnerability.