VULNERABILITY INTELLIGENCE

CVE-2018-20621

CVSS score7.8 HIGH
EPSS probability0.90%
CISA KEVNot currently listed
Published2019-03-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references