CVE-2020-37060

Atomic Alarm Clock 6.3 is affected by a local privilege escalation due to an unquoted service path in its service configuration, enabling an attacker to execute arbitrary code with SYSTEM privileges by placing a malicious Program.exe. The issue allows persistent, system‑level access. Public refer...