CVE-2018-20621

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM.

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.89% chance of exploitation in the next 30 days, 57th percentile

Published

2019-03-13

Updated

2024-08-05

Proof-of-concept exploits (1)

• RhinoSecurityLabs/CVEs/tree/master/CVE-2018-20621

References

• CVE Record
• NVD entry

Related

• CVE-2018-5757
• CVE-2019-16864
• CVE-2019-9758
• CVE-2019-9926
• CVE-2023-47320
• CVE-2023-47321