PT-2026-4655 · Microvirt · Memu Play

Samalucard · Publicado 2026-01-25 · Atualizado 2026-01-25 · CVE-2020-36937

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microvirt MEMU Play version 3.7.0

Description The software contains an unquoted service path issue in the MEmusvc Windows service. This allows local attackers to potentially execute arbitrary code by exploiting the unquoted binary path to inject malicious executables. Successful exploitation could result in the execution of these executables with elevated LocalSystem privileges.

Recommendations Ensure the service path for MEmusvc is properly quoted to prevent the execution of unauthorized code.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-36937

Produtos afetados

Memu Play

Referências · 6

• 🔥 https://exploit-db.com/exploits/49016 · Exploit
• https://vulncheck.com/advisories/memu-play-memusvc-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36937 · Nota de Segurança
• https://memuplay.com · Nota
• https://t.me/cveNotify/149809 · Publicação no Telegram
• https://t.me/CVEtracker/42954 · Publicação no Telegram