CVE-2025-60320

Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to SYSTEM by placing a malicious executable at C:\Program.exe.

Published 2025-10-29. Last modified 2026-06-17.