CVE-2020-37252Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2020-37252 Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injectin… https://www.cve.org/CVERecord?id=CVE-2020-37252 ----- Traducción: CVE-2020-37252 Rea… http://infoflow.cloud`
Post summary
The post announces CVE‑2020‑37252, highlighting an unquoted service path flaw in Realtek Audio Service that permits local privilege escalation.
0000021
82 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2020-37252 Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injectin… https://www.cve.org/CVERecord?id=CVE-2020-37252
Post summary
The text briefly discloses that CVE-2020-37252 is an unquoted service path flaw in Realtek Audio Service, enabling local privilege escalation via injection, but provides no PoC, exploit, or patch details.
00000215
57.6K followersView on X

Explore more

Back to dashboard