High severity · published Jan 25, 2026
CVE-2020-36937
MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MP
MEMU PLAY · Microvirt
3.7.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-36937
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-36937
www.exploit-db.com
https://www.exploit-db.com/exploits/49016
www.memuplay.com
https://www.memuplay.com/
www.vulncheck.com
https://www.vulncheck.com/advisories/memu-play-memusvc-unquoted-service-path
More from MEMU PLAY
9.8
CVE-2020-37129
Memu Play 7.1.3 - Insecure Folder Permissions