CVE-2016-20085

Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation

Published Jun 19, 2026 CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Description

Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a malicious executable in the service path. Attackers can insert an executable file in the unquoted path and restart the service to execute code with LocalSystem privileges.

Analysis

Technical impact

The vulnerability is an unquoted service path in the Realtek High Definition Audio Driver 6.0.1.6730. A local attacker can place a malicious executable in the unquoted service path and restart the service, causing the executable to run with LocalSystem privileges. This flaw, identified as CWE‑428, enables an attacker to execute arbitrary code as a system administrator on a compromised machine.

Affected Systems

Realtek High Definition Audio Driver version 6.0.1.6730 is affected. No other versions or products are listed.

Risk and Exploitability

The CVSS score of 8.5 indicates a high impact vulnerability. Although an EPSS score is not available, the public exploit code listed on exploit‑db demonstrates that attackers can readily take advantage of this flaw with local access. The vulnerability is not listed in the CISA KEV catalog, but the high CVSS and demonstrated exploitability warrant close attention.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Realtek

Realtek High Definition Audio Driver

affected

Version	Status	Constraints
`6.0.1.6730`	affected	—

No data.

Vendor Product Versions

Realtek

Realtek High Definition Audio Driver

Version	Status	Scheme	Platform
`6.0.1.6730`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update the Realtek audio driver to a version where the service path is correctly quoted or otherwise patched.
If an update is not immediately available, configure the service so that its path is properly quoted or remove the unquoted portion of the path from the system registry.
Prevent unauthorized executables in the service directory by setting restrictive file permissions or moving the directory to a protected location.

Generated by OpenCVE AI on June 19, 2026 at 20:41 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.168% probability within 30 days)

Exploitation poc

Automatable no

Technical Impact total

References

Link	Providers
https://www.exploit-db.com/exploits/40587
https://www.vulncheck.com/advisories/realtek-high-definition-audio-driver-privilege-escalation

History

Jul 15, 2026 2:15 AM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Dell Dell realtek High Definition Audio Driver
CPEs		cpe:2.3:a:dell:realtek_high_definition_audio_driver:6.0.1.6730:::::::*
Vendors & Products		Dell Dell realtek High Definition Audio Driver

Jun 24, 2026 9:00 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Realtek Realtek realtek High Definition Audio Driver
Vendors & Products		Realtek Realtek realtek High Definition Audio Driver

Jun 22, 2026 4:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jun 19, 2026 6:15 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a malicious executable in the service path. Attackers can insert an executable file in the unquoted path and restart the service to execute code with LocalSystem privileges.
Title		Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation
Weaknesses		CWE-428
References		https://www.exploit-db.com/exploits/40587 https://www.vulncheck.com/advisories/realtek-high-definition-audio-driver-privilege-escalation
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`