Autoupdate (Microsoft) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 73 known versions, newest CVE from 2025-09-09. Vendor: Microsoft.

CVEs of Autoupdate

• CVE-2025-55317 - CVSS 7.8 (high), 2025-09-09: Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
• CVE-2025-47968 - CVSS 7.8 (high), 2025-06-10: Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
• CVE-2025-29801 - CVSS 7.8 (high), 2025-04-08: Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
• CVE-2025-29800 - CVSS 7.8 (high), 2025-04-08: Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
• CVE-2025-24036 - CVSS 7 (high), 2025-02-11: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
• CVE-2025-21360 - CVSS 7.8 (high), 2025-01-14: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
• CVE-2024-43492 - CVSS 7.8 (high), 2024-09-10: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
• CVE-2020-0984 - CVSS 7.8 (high), 2020-04-15: An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka…