CVE-2020-36916 HIGH

CVE-2020-36916: TDM Digital Signage PC Player 4.1.0.4 Privilege Escalation via Insecure Permissions

Vendor Tdmsignage
Product TDM Digital Signage PC Player
Weakness CWE-732
Published January 6, 2026
Last update January 6, 2026

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users to modify executable files. Attackers can leverage the 'Modify' permissions for authenticated users to replace executable files with malicious binaries and gain elevated system access.

Key dates

02Disclosure timeline

January 6, 2026 CVE published
January 6, 2026 Record updated