Microsoft Autoupdate vulnerabilities
8 CVEs affecting Microsoft Autoupdate, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-55317, published 2025-09-09.
More from Microsoft.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2025-29801, published 2025-04-08. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
- CVE-2025-29800, published 2025-04-08. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
- CVE-2020-0984, published 2020-04-15. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka 'Microsoft (MAU) Office Elevation of…
- CVE-2024-43492, published 2024-09-10. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
- CVE-2025-21360, published 2025-01-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
- CVE-2025-55317, published 2025-09-09. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
- CVE-2025-47968, published 2025-06-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
- CVE-2025-24036, published 2025-02-11. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability