Medium severity6.5NVD Advisory· Published Sep 14, 2022· Updated Jun 17, 2026

CVE-2020-36603

Description

The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver must first be installed by a user with administrative privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

HoYoVerse/Genshin Impact mhyprot2.sysdescription
HoYoVerse/Genshin Impact mhyprot2.sysllm-create
Range: = 1.0.0.0
HoYoVerse/mhyprot2.sysllm-create
Range: = 1.0.0.0
HoYoVerse/Genshin Impactllm-fuzzy

Patches

Vulnerability mechanics

References

web.archive.org/web/20211204031301/https://www.godeye.club/2021/05/20/001-disclosure-mhyprot.htmlnvdExploitThird Party Advisory
www.trendmicro.com/en_us/research/22/h/ransomware-actor-abuses-genshin-impact-anti-cheat-driver-to-kill-antivirus.htmlnvdExploitThird Party Advisory
www.vice.com/en/article/y3p35w/hackers-are-using-anti-cheat-in-genshin-impact-to-ransom-victimsnvdExploitPress/Media CoverageThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000