CVE-2020-36976 - Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path

CVE-2020-36976 - Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path

CVE ID : CVE-2020-36976 Published : Jan. 27, 2026, 7:16 p.m. | 51 minutes ago Description : Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Acer\Registration\ to inject malicious executables that would run with elevated LocalSystem privileges during service startup. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
Jan. 27, 2026
Attack Vector: local