MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation

Exploit Title: MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation Google Dork: N/A Date: 2026-06-16 Exploit Author: Mohammad Vendor Homepage: https://www.memuplay.com Software Link: https://www.memuplay.com/download.html Version: 9.2.7.0 Tested on: Windows 10 x64 / Windows 11 x64 CVE:...

CVE-2026-36213

Microvirt MEmu Android Emulator 9.2.7.0 is vulnerable to a Local Privilege Escalation (LPE) via the MemuService.exe component on Windows. The root cause is insecure NTFS permissions that grant FullControl to BUILTIN\Users and Everyone , allowing low-privileged users to overwrite the service binar...

CVE-2026-36213

An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component...

CVE-2019-14514

An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu emulator contains a /system/bin/systemd binary that is run with root privileges on startup this is unrelated to Red Hat's systemd init program, and is a closed-source proprietar...

CVE-2018-20621

An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM...