CVE-2020-36603

PoC ×3—

CVSS 3.1

6.5 medium

EPSS

<1%p48

Published

Sep 14, 2022 (Sep 14, 2022)

Modified

Jun 17, 2026

Description

The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be installed by a user with administrative privileges.

Vendors: hoyoverse
Products: mhyprot2
Weakness: CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.