# Realtek vulnerabilities Source: https://junglewise.ai/threats/vendors/realtek Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/realtek.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 10 vulnerabilities in Realtek: 2 in the last 7 days and 2 in the last 90 days, 3 of them critical and 3 exploited in the wild. The most recent, CVE-2026-90975, was published on 6 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own. ## Counts - Last 7 days: 2 - Last 30 days: 2 - Last 90 days: 2 - All time: 10 (3 critical, 3 exploited in the wild) ## About Realtek A fabless semiconductor company that designs and develops integrated circuits for communications, computer peripherals, and multimedia applications. ## Latest Realtek vulnerabilities - [CVE-2026-90975: Realtek RtUsbA64.sys IOCTL kernel write access](https://junglewise.ai/threats/cve-2026-90975-a-vulnerability-in-realtek-s-rtusba64-sys-usb-audio-driver-allows) (info, published 6 Nov 2026) - [CVE-2026-122113: Realtek RtUsbA64.sys stack exhaustion in USB descriptor parsing](https://junglewise.ai/threats/cve-2026-122113-a-vulnerability-in-realtek-s-rtusba64-sys-usb-audio-driver) (info, published 6 Nov 2026) - [CVE-2026-11894: Realtek BEE Bluetooth HCI driver double-free in send callback](https://junglewise.ai/threats/cve-2026-11894-realtek-bee-bluetooth-hci-driver-double-free-in-send-callback) (medium, CVSS 5.9, published 11 Aug 2026) - [CVE-2020-37252: Realtek Audio Service unquoted service path in RtkAudioService64.exe](https://junglewise.ai/threats/cve-2020-37252-realtek-audio-service-unquoted-service-path-in-rtkaudioservice64) (high, CVSS 7.8, published 19 Jun 2026) - [CVE-2016-20085: Realtek High Definition Audio Driver unquoted service path privilege escalation](https://junglewise.ai/threats/cve-2016-20085-realtek-high-definition-audio-driver-unquoted-service-path) (high, CVSS 7.8, published 19 Jun 2026) - [CVE-2026-36355: Realtek rtl819x Jungle SDK Kernel Memory Read/Write in Wi-Fi Driver](https://junglewise.ai/threats/cve-2026-36355-realtek-rtl819x-jungle-sdk-kernel-memory-read-write-in-wi-fi) (high, CVSS 7.7, published 5 May 2026) - [CVE-2025-44526: Realtek RTL8762E SDK improper input validation in BLE stack](https://junglewise.ai/threats/cve-2025-44526-realtek-rtl8762e-sdk-improper-input-validation-in-ble-stack) (medium, CVSS 6.5, published 9 Jul 2025) - [CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2014-8361-realtek-sdk-improper-input-validation-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Sep 2023) - [CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-35394-realtek-jungle-sdk-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 10 Dec 2021) - [CVE-2021-35395: Realtek AP-Router SDK Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-35395-realtek-ap-router-sdk-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) ## Most severe Realtek vulnerabilities - [CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2014-8361-realtek-sdk-improper-input-validation-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Sep 2023) - [CVE-2021-35394: Realtek Jungle SDK Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2021-35394-realtek-jungle-sdk-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 10 Dec 2021) - [CVE-2021-35395: Realtek AP-Router SDK Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-35395-realtek-ap-router-sdk-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2020-37252: Realtek Audio Service unquoted service path in RtkAudioService64.exe](https://junglewise.ai/threats/cve-2020-37252-realtek-audio-service-unquoted-service-path-in-rtkaudioservice64) (high, CVSS 7.8, published 19 Jun 2026) - [CVE-2016-20085: Realtek High Definition Audio Driver unquoted service path privilege escalation](https://junglewise.ai/threats/cve-2016-20085-realtek-high-definition-audio-driver-unquoted-service-path) (high, CVSS 7.8, published 19 Jun 2026) - [CVE-2026-36355: Realtek rtl819x Jungle SDK Kernel Memory Read/Write in Wi-Fi Driver](https://junglewise.ai/threats/cve-2026-36355-realtek-rtl819x-jungle-sdk-kernel-memory-read-write-in-wi-fi) (high, CVSS 7.7, published 5 May 2026) - [CVE-2025-44526: Realtek RTL8762E SDK improper input validation in BLE stack](https://junglewise.ai/threats/cve-2025-44526-realtek-rtl8762e-sdk-improper-input-validation-in-ble-stack) (medium, CVSS 6.5, published 9 Jul 2025) - [CVE-2026-11894: Realtek BEE Bluetooth HCI driver double-free in send callback](https://junglewise.ai/threats/cve-2026-11894-realtek-bee-bluetooth-hci-driver-double-free-in-send-callback) (medium, CVSS 5.9, published 11 Aug 2026) - [CVE-2026-90975: Realtek RtUsbA64.sys IOCTL kernel write access](https://junglewise.ai/threats/cve-2026-90975-a-vulnerability-in-realtek-s-rtusba64-sys-usb-audio-driver-allows) (info, published 6 Nov 2026) - [CVE-2026-122113: Realtek RtUsbA64.sys stack exhaustion in USB descriptor parsing](https://junglewise.ai/threats/cve-2026-122113-a-vulnerability-in-realtek-s-rtusba64-sys-usb-audio-driver) (info, published 6 Nov 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Realtek technologies - [Realtek SDK](https://junglewise.ai/threats/technologies/sdk): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Realtek vulnerabilities", https://junglewise.ai/threats/vendors/realtek, 10 November 2026.