CVE-2020-36959 affects IDT PC Audio version 1.0.6499.0 with an unquoted service path vulnerability in the STacSV service. Local attackers can exploit this flaw to execute arbitrary code with elevated LocalSystem privileges during service startup. The vulnerability allows code injection through the unquoted service path, leading to privilege escalation. This is a local privilege escalation vulnerability that requires initial access to the system. The vulnerability affects PC audio driver software commonly found on Windows systems.