Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Microsoft Component: Autoupdate Clear all filters
TI-2025-34972 CVE-2025-55317 · GHSA-9f84-fg53-w8q5

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Priority LOW 36

Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00421 Published 2025-09-09 Fixed in 4.80 CWE-59
TI-2020-00954 CVE-2020-0984 · GHSA-7794-m8w6-jf63

Improper input validation in Microsoft AutoUpdate for Mac

Priority LOW 36

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka 'Microsoft (MAU) Office Elevation of Privilege Vulnerability'…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00952 Published 2020-04-15 No fix listed CWE-20