CVE-2019-25568: Microvirt Memu

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.

Affected products

• Microvirt Memu: up to and including 6.0.7

Published 2026-03-21. Last modified 2026-06-17.