The vulnerability is an unquoted service path in the Realtek High Definition Audio Driver 6.0.1.6730. A local attacker can place a malicious executable in the unquoted service path and restart the service, causing the executable to run with LocalSystem privileges. This flaw, identified as CWE‑428, enables an attacker to execute arbitrary code as a system administrator on a compromised machine.

Realtek High Definition Audio Driver version 6.0.1.6730 is affected. No other versions or products are listed.

The CVSS score of 8.5 indicates a high impact vulnerability. Although an EPSS score is not available, the public exploit code listed on exploit‑db demonstrates that attackers can readily take advantage of this flaw with local access. The vulnerability is not listed in the CISA KEV catalog, but the high CVSS and demonstrated exploitability warrant close attention.