CVE-2020-37129 - Memu Play 7.1.3 - Insecure Folder Permissions

Back Back to CVE browser

HIGH

Memu Play 7.1.3 - Insecure Folder Permissions

Published Feb 5, 2026

8.5

HIGH

CVSS 4.0

EPSS 0.38%

Description

Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file modification permissions.

Affected products

Vendor Microvirt Product Memu Play Default
n/a
- Version
  7.1.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microvirt

Memu Play

n/a

Version	Status	Constraints
7.1.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (3)

https://www.exploit-db.com/exploits/48283
exploit
https://www.memuplay.com/
product
https://www.vulncheck.com/advisories/memu-play-insecure-folder-permissions
third-party-advisory

Link	Providers	Tags
https://www.exploit-db.com/exploits/48283		exploit
https://www.memuplay.com/		product
https://www.vulncheck.com/advisories/memu-play-insecure-folder-permissions		third-party-advisory