CVE-2019-25568Disclosure(microvirt / memu)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • memu

Threat summary

  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 5 signals
  • Disclosure: 3 classified signals
  • General: 2 classified signals
  • Peaked 1d ago at 3 mentions (2026-03-21); latest day: 2
  • 5 total mentions across 2 days

Affected systems

Vendors
Products
memu

Deep dive

Activity timeline5 mentions / 2d
01223Mentions · 2026-03-21: 3Mentions · 2026-03-22: 2Technical Details · 2026-03-21: 3Technical Details · 2026-03-22: 203-2103-22
Signal classification2 categories
Disclosure
360.0%
General
240.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-03-213
Disclosure2General1
2026-03-222
Disclosure1General1
Full discourse5 posts
  • CTIWatch@ctiwatchcloud
    General

    🔍 Today's Top Vulnerabilities 🔴 CVE-2019-25568 | CVSS 9.8 🟠 CVE-2026-4535 | CVSS 8.8 🟠 CVE-2026-4534 | CVSS 8.8 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel

    Post summary

    The tweet simply lists three CVEs and their CVSS scores, offering no additional exploitation, patch, or technical detail beyond the severity ratings.

    0001071
    5.6K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2019-25568 Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable… https://www.cve.org/CVERecord?id=CVE-2019-25568

    Post summary

    The post describes CVE‑2019‑25568, an insecure file‑permission vulnerability in Memu Play 6.0.7 that allows low‑privilege users to replace the MemuService.exe executable and gain higher privileges. No PoC, exploit, patch, or indication of active exploitation is mentioned.

    0000068
    56.8K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25568 - Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions Intel Report: https://ift.tt/WEv5gND

    Post summary

    An alert identifies CVE‑2019‑25568 as a privilege‑escalation flaw in Memu Play 6.0.7 but does not provide PoC, exploit, active exploitation, or patch information.

    0000030
    334 followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2019-25568: CRITICAL] Insecure file permissions in Memu Play 6.0.7 enable privilege escalation, as low-privilege users can replace MemuService.exe to execute malicious code with system-level access.#cve,CVE-2019-25568,#cybersecurity https://cvefind.com/CVE-2019-25568

    Post summary

    The tweet announces a critical privilege‑escalation flaw in Memu Play 6.0.7 caused by insecure file permissions, permitting non‑privileged users to replace the MemuService.exe binary and run code with SYSTEM rights, and links to the CVE details.

    0000035
    605 followersView on X
  • 0day Signal@0dayPublishing
    Disclosure

    🚨 CVE-2019-25568: Memu Play 6.0.7 Privilege Escala... Android emulator drops the ball on basic file permissions - any local user can swap MemuService.exe for instant SYSTEM ... https://zerodaysignal.com/vulnerability/CVE-2019-25568 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    The post reports CVE-2019-25568, a privilege‑escala flaw in Memu Play 6.0.7 allowing a local user to replace MemuService.exe and execute as SYSTEM, without mentioning a PoC, exploit tool, active use, or patch.

    0000058
    159 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrovirtmemu---

Explore more