Unquoted Service Path Vulnerability in Magic Mouse 2 Utilities by Magic Utilities
CVE-2020-36936

8.5HIGH

Key Information:

Vendor

Magic Utilities

Status
Magic Mouse 2 Utilities
Vendor
CVE Published:
25 January 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2020-36936?

Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service configuration. This flaw enables attackers to exploit the incorrectly configured path to inject malicious executables. By placing a rogue file in the service path, an attacker could gain elevated system privileges, potentially compromising the integrity and security of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Magic Mouse 2 utilities 2.20

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2020-36936 - Proof of Concept

References

https://www.exploit-db.com/exploits/49017
exploit
https://magicutilities.net/magic-mouse/home
product
https://www.vulncheck.com/advisories/magic-mouse-utilitie...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

SamAlucard
JSON
.