CVE-2016-20085CWE-428

CVE-2016-20085

High · published June 19, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a malicious executable in the service path. Attackers can insert an executable file in the unquoted path and restart the service to execute code with LocalSystem privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.8th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-06-19T19:16Z
References (2)
https://www.exploit-db.com/exploits/40587 · [email protected]https://www.vulncheck.com/advisories/realtek-high-definition-audio-driver-privilege-escalation · [email protected]
EPSS history
Timeline
  • 19 JUN 14:16Z
    Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation
    cvelistv5