Skip to content
OpenAdvisories
High · 7.8 CVE-2020-36976 EUVD-2020-30873GHSA-56p5-hjp2-w73q

Global Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service Path

Published Jan 27, 2026 · Updated Jan 29, 2026 · Assigned by VulnCheck

Description

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files (x86)\Acer\Registration\ to inject malicious executables that would run with elevated LocalSystem privileges during service startup.

Affected products

VendorProductAffectedFixed
Acer Global Registration Service 1.0.0.3 —

References