CVE-2018-20621

PoC —

CVSS 3.0

7.8 high

EPSS

<1%p57

Published

Mar 13, 2019 (Mar 13, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM.

Vendors: microvirt
Products: memu
Weakness: CWE-732
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.