7.8
High
CVE-2025-29801 Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally
Description
Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft AutoUpdate for Mac 4.0 | 4.0.0 → < 4.78 | 4.78 |
References
- Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft AutoUpdate for Mac
The 8 CVEs of Microsoft AutoUpdate for Mac →
CVE-2025-55317
Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized…
7.8
High
CVE-2025-47968
Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-29800
Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-24036
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
7.0
High