Filtered by vendor Microvirt Subscriptions
Filtered by product Memu Play Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-37129 1 Microvirt 1 Memu Play 2026-02-06 9.8 Critical
Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file modification permissions.
CVE-2020-36937 1 Microvirt 1 Memu Play 2026-01-26 7.8 High
Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem privileges.