Local Privilege Escalation in Microvirt MEmu Service
CVE-2018-20621

7.8HIGH

Key Information:

Vendor

Microvirt

Status
Memu
Vendor
CVE Published:
13 March 2019

What is CVE-2018-20621?

A local privilege escalation vulnerability exists in the MEmu emulator's service binary, MemuService.exe, due to insecure permissions configured during the installation process. This flaw allows an attacker with local access to execute arbitrary code with elevated privileges as NT AUTHORITY/SYSTEM, potentially compromising system integrity and security. Users are urged to review their installations and apply necessary security measures.

References

https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.