CVE-2020-37252: Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation
Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37252?
CVE-2020-37252 has a severity score of 8.5, indicating a high level of risk.
How do I fix CVE-2020-37252?
To fix CVE-2020-37252, update Realtek Audio Service to the latest version that addresses the unquoted service path vulnerability.
What kind of attack does CVE-2020-37252 enable?
CVE-2020-37252 enables local privilege escalation attacks through the injection of malicious code in the unquoted service path.
Which software is affected by CVE-2020-37252?
CVE-2020-37252 affects the Realtek Audio Service version 1.0.0.55.
Who can exploit CVE-2020-37252?
Local attackers can exploit CVE-2020-37252 to escalate their privileges on the affected system.