A local attacker can exploit an unquoted service path in the IObitUnSvr service of IObit Uninstaller 9.5.0.15. By placing a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restarting the service, the attacker gains SYSTEM level privileges, effectively escalating local access to full administrative control of the host. The weakness is identified as CWE-428: Unquoted Service Path.

The vulnerability affects installations of IObit Uninstaller version 9.5.0.15 that run the IObitUnSvr service. Systems with this version deployed in the C:\Program Files (x86)\IObit folder are at risk; earlier or later major versions are not confirmed to be vulnerable by the available data.

The CVSS score of 8.5 classifies this issue as a high severity vulnerability. Exploitation requires local access to the machine but does not require special software or network connectivity beyond normal local privileges; the EPSS score is currently not available. Because the vulnerability is not listed in the CISA KEV catalog, no active known exploits are reported, but the attack path is straightforward: place the malicious executable and restart the compromised service. The potential impact includes full control over the affected system, which could enable data theft, persistence, or lateral movement. However, these outcomes are inferred from the elevated privileges and are not explicitly demonstrated in the available data.