CVE-2020-37252CWE-428

CVE-2020-37252

High · published June 19, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.5th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-06-19T19:16Z
References (3)
https://www.exploit-db.com/exploits/49015 · [email protected]https://www.realtek.com/en/ · [email protected]https://www.vulncheck.com/advisories/realtek-audio-service-unquoted-service-path-privilege-escalation · [email protected]
EPSS history
Timeline
  • 19 JUN 14:16Z
    Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation
    cvelistv5