PT-2026-50917 · Realtek · Realtek Audio Service

Erika Figueroa · Publicado 2026-06-19 · Atualizado 2026-06-19 · CVE-2020-37252

NVD

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2020-37252

Produtos afetados

Realtek Audio Service

Referências · 4

• 🔥 https://exploit-db.com/exploits/49015 · Exploit
• https://realtek.com/en · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37252 · Nota de Segurança
• https://vulncheck.com/advisories/realtek-audio-service-unquoted-service-path-privilege-escalation · Nota