PT-2026-50916 · Real · Realtimes Desktop Service

Erick Galindo · Published 2026-06-19 · Updated 2026-06-19 · CVE-2020-37251

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37251

Affected Products

Realtimes Desktop Service

References · 4

• 🔥 https://exploit-db.com/exploits/49021 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37251 · Security Note
• https://real.com · Note
• https://vulncheck.com/advisories/realtimes-desktop-service-unquoted-service-path-privilege-escalation · Note