VulnSocial

CVE-2021-36923(realtek / rtsupx_usb_utility_driver)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.

realtek CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • rtsupx_usb_utility_driver

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
realtek
Products
rtsupx_usb_utility_driver

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-31: 110-31
Full discourse1 post
  • Jose Enrique Hernandez@_josehelps

    It carries four CVEs from Realtek's 2021 advisory: - CVE-2021-36922: access to arbitrary USB devices - CVE-2021-36923: privileged IN/OUT instructions - CVE-2021-36924: pool overflow - CVE-2021-36925: physical memory read/write Affected through 1.14.0.0, fixed in 2.0.0.0.

    1000089
    3.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apprealtekrtsupx_usb_utility_driver---

Explore more

Back to dashboardrealtek CVEsrtsupx_usb_utility_driver vulnerabilities