Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2016-20055: IObit Advanced SystemCare Unquoted Service Path Escalates Local Privileges

CVE-2016-20055 · published 7 months ago

Summary

IObit's Advanced SystemCare software has a security issue that could let an attacker on the same computer as you gain extra power on the system. This could happen if an attacker puts a malicious program in a specific folder, which would then run with very high system privileges when the system restarts. You should update your Advanced SystemCare software to fix this issue.

Original advisory text

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-428Unquoted Search Path or Element

Timeline

Published4 Apr 2026

Updated1 Nov 2026

First seen4 Apr 2026

Sources

CVE-2016-20055 · NVD

Track software like this

Free during beta