CVE-2016-20085

Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a malicious executable in the service path. Attackers can insert an executable file in the unquoted path and restart the service to execute code with LocalSystem privileges.

Score

CVSS 4.0 8.5 High

Status

Awaiting Analysis - disclosure@vulncheck.com

Published

2026-06-19

Last modified

2026-07-15

Weaknesses

CWE-428

Affected products

• Realtek High Definition Audio Driver (Dell)

References

• https://www.exploit-db.com/exploits/40587
• https://www.vulncheck.com/advisories/realtek-high-definition-audio-driver-privilege-escalation