SpyHunter 4 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attac…

CVE-2020-37055 is an unquoted service path vulnerability in SpyHunter 4 security software. The vulnerability allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit this by placing malicious executables in specific file system locations. The malicious code executes with elevated privileges during service startup. This is a local privilege escalation vulnerability that affects the SpyHunter 4 service configuration. The vulnerability requires local access to exploit but can lead to complete system compromise.