CVE-2014-8494: Estsoft Alupdate

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via a Trojan horse file.

Affected products

• Estsoft Alupdate: version 8.5.1.0.0 only

Published 2014-11-03. Last modified 2026-06-17.