CVE-2020-37060: Drive-Software Atomic Alarm Clock x86

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent system-level access.

Affected products

• Drive-Software Atomic Alarm Clock x86: version 6.3 only

Published 2026-01-30. Last modified 2026-06-17.