Approved changes feed: RSS · Atom

cpe:2.3:a:microvirt:memu_play:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrovirt (5046c50d-ae82-5d03-82f1-75f49383fe13)
ProductMemu Play (3c55ebcc-45aa-545b-ad2b-e189e290d009)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37129 vulnerable 2026-06-08 05:25:50.208927 Memu Play 7.1.3 - Insecure Folder Permissions
CRITICAL (9.8)
Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file modification permissions.
Published: 2026-02-05T16:13:34.569Z
Updated: 2026-03-05T01:28:07.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36937 vulnerable 2026-06-08 05:25:49.881300 MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path
HIGH (7.8)
Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem privileges.
Published: 2026-01-25T14:01:18.295Z
Updated: 2026-01-26T16:31:38.291Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.