CVE-2016-20060

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H                                    

Vulnerability Description

Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious code executes with LocalSystem privileges.

Vulnerability Details

Published Date

April 04, 2026

Last Modified

April 07, 2026

CWE ID

CWE-428

Source

NVD

Vendor

Hotspotshield

Product

Hotspot Shield

External References

https://www.exploit-db.com/exploits/40528
https://www.hotspotshield.com
https://www.hotspotshield.com/download/
https://www.vulncheck.com/advisories/hotspot-shield-unquoted-service-path-privilege-escalation

CVE-2016-20060

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment