PT-2026-50917 · Realtek · Realtek Audio Service

Erika Figueroa · Published 2026-06-19 · Updated 2026-06-19 · CVE-2020-37252

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2020-37252

Affected Products

Realtek Audio Service

References · 4

• 🔥 https://exploit-db.com/exploits/49015 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37252 · Security Note
• https://realtek.com/en · Note
• https://vulncheck.com/advisories/realtek-audio-service-unquoted-service-path-privilege-escalation · Note