Realtek vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Realtek flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2014-8361 Realtek SDK Improper Input ValidationExploited since Sep 18, 2023 · CVSS 9.8
• CVE-2021-35394 Realtek Jungle SDK Remote Code ExecutionExploited since Dec 10, 2021 · CVSS 9.8
• CVE-2021-35395 Realtek AP-Router SDK Buffer OverflowExploited since Nov 3, 2021 · CVSS 9.8

Latest high and critical flaws

• CVE-2020-37252 Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by inHigh 8.5 · Jun 19, 2026
• CVE-2016-20085 Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local attackers to escalate privileges by placing a High 8.5 · Jun 19, 2026
• CVE-2019-25345 Realtek IIS Codec Service 6.4.10041.133 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code.High 8.5 · Feb 12, 2026
• CVE-2020-36974 Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated sHigh 8.5 · Jan 27, 2026
• CVE-2025-8302 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability.High 8.8 · Sep 2, 2025
• CVE-2025-8301 Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability.High 7.8 · Sep 2, 2025
• CVE-2025-8300 Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability.High 8.8 · Sep 2, 2025
• CVE-2025-8299 Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability.High 8.8 · Sep 2, 2025
• CVE-2025-44531 An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted before a pairing public key is High 7.5 · Jun 24, 2025
• CVE-2024-11857 Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability.High 8.5 · Jun 2, 2025
• CVE-2024-40431 A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD High 8.8 · Oct 23, 2024
• CVE-2022-25480 Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) befoHigh 7.8 · Jul 2, 2024
• CVE-2022-25478 Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) befoHigh 7.8 · Jul 2, 2024
• CVE-2024-33224 An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitHigh 8.4 · May 22, 2024
• CVE-2022-40740 Realtek GPON router has insufficient filtering for special characters.High 7.2 · Jan 2, 2023
• CVE-2022-34326 In ambiot amb1_sdk (aka SDK for Ameba1) before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX taHigh 7.5 · Sep 27, 2022
• CVE-2022-27255 In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow.Critical 9.8 · Aug 1, 2022
• CVE-2022-29558 Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.High 8.8 · Jul 28, 2022
• CVE-2021-39306 A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Authentication Critical 9.8 · Dec 22, 2021
• CVE-2021-43573 A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10.Critical 9.8 · Nov 10, 2021
• CVE-2021-36925 RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write opHigh 7.8 · Nov 2, 2021
• CVE-2021-36924 RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow (leading to EHigh 7.8 · Nov 2, 2021
• CVE-2021-36923 RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB deHigh 7.8 · Nov 2, 2021
• CVE-2021-36922 RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB deHigh 7.8 · Nov 2, 2021
• CVE-2021-35395 Realtek AP-Router SDK Buffer OverflowExploited · Critical 9.8 · Aug 16, 2021