A privilege escalation vulnerability in IObit Advanced System Care Service 13 allows local attackers to execute arbitrary code with elevated system permissions.

This is an Unquoted Search Path vulnerability (CWE-428). Because the service path is not enclosed in quotes, a local user with lower privileges can place a malicious executable in a parent directory, which the service may then run with system-level privileges.

The vulnerability is rated at 7.8 (High) and poses a severe threat to system integrity. A local attacker who has already gained restricted access to the system can escalate their privileges to full system control, potentially bypassing all local security boundaries.

Immediate Action: Update the IObit Advanced System Care Service to the latest available version provided by the vendor.

Proactive Monitoring: Monitor system logs for unauthorized service installations or the execution of unexpected binaries within the service's directory structure.

Compensating Controls: Ensure strict filesystem permissions on the installation directory to prevent non-privileged users from creating or modifying files in the path of the vulnerable service.

Public Exploit Available: Yes — a public exploit is available via ExploitDB (ID 49049).

Privilege escalation flaws require immediate attention, particularly in environments where multiple users share access to a system. Patching is the only definitive fix; ensure all systems are updated to remove the unquoted path vulnerability.