CVE-2019-25568 CRITICAL

CVE-2019-25568: Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions

Vendor Memuplay
Product Memu Play
Weakness CWE-306 · Missing auth
Published March 21, 2026
Last update March 23, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.

Key dates

02Disclosure timeline

March 21, 2026 CVE published
March 23, 2026 Record updated