What is CVE-2020-36957?

CVE-2020-36957 is a high-severity vulnerability in Pdf-Complete Pdf Complete, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2026-01-26.

How severe is CVE-2020-36957?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Pdf-Complete Pdf Complete

CVE-2020-36957

PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges.

EPSS: 0.001 (2.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Pdf-complete Pdf Complete — versions 0

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

ExploitDB-49226 (exploit)
PDF Complete Vendor Homepage (product)
VulnCheck Advisory: PDF Complete 3.5.310.2002 - 'pdfsvc.exe' Unquoted Service Path (third-party-advisory)

Frequently asked questions

What is CVE-2020-36957?: CVE-2020-36957 is a high-severity vulnerability in Pdf-Complete Pdf Complete, classified under Unquoted Search Path or Element. CVSS score: 7.8/10. Published 2026-01-26.
How severe is CVE-2020-36957?: High severity. CVSS v3 base score is 7.8 out of 10.