Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malici…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 4, 2026 · NIST NVD

   Detected

   Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious code executes with LocalSystem privileges.

2. Jul 20, 2026 · NIST NVD

   Updated

   Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious code executes with LocalSystem privileges.

Sources

• CVE.orgVulnerability recordCVE-2016-20060

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2016-20060

  Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system rebo

  nvd.nist.gov

References

• Reference · exploit-db.com
• Reference · hotspotshield.com
• Reference · hotspotshield.com
• Reference · vulncheck.com