Unquoted Service Path in ShareMouse 5.0.43 Enables Privilege Escalation

Publication date: 2026-01-28

Last updated on: 2026-01-28

Assigner: VulnCheck

Description

ShareMouse 5.0.43 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the insecure service path configuration by placing malicious executables in specific system directories to gain elevated access during service startup.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-01-28

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2020-36991

EUVD

EUVD-2020-30899

Affected Vendors & Products

Vendor	Product	Version / Range
sharemouse	sharemouse	5.0.43

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-428	The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

Attack-Flow Graph

Executive Summary

This vulnerability is an unquoted service path issue in ShareMouse 5.0.43. It allows local users to potentially execute arbitrary code with elevated system privileges by exploiting the insecure service path configuration. Attackers can place malicious executables in specific system directories, which the service might run during startup, leading to elevated access.

Impact Analysis

The vulnerability can allow an attacker with local access to execute arbitrary code with elevated system privileges. This means the attacker could gain higher-level control over the system, potentially leading to unauthorized actions, system compromise, or further exploitation.

Hi! I’m here to help you understand CVE-2020-36991. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70