← Voltar para CVEs
CVE-2020-36976
HIGH7.8
Descricao
Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Acer\Registration\ to inject malicious executables that would run with elevated LocalSystem privileges during service startup.
Detalhes CVE
Pontuacao CVSS v3.17.8
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosLOW
Interacao do usuarioNONE
Publicado1/27/2026
Ultima modificacao1/29/2026
Fontenvd
Avistamentos honeypot0
Fraquezas (CWE)
CWE-428
Referencias
https://www.acer.com/ac/en/US/content/home(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/49142(disclosure@vulncheck.com)
https://www.vulncheck.com/advisories/global-registration-service-gregsvcexe-unquoted-service-path(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/49142(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.