7.8
High
CVE-2025-55317 Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized…
Description
Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft AutoUpdate for Mac 4.0 | 4.0.0 → < 4.80 | 4.80 |
References
- Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft AutoUpdate for Mac
The 8 CVEs of Microsoft AutoUpdate for Mac →
CVE-2025-47968
Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-29801
Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-29800
Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally
7.8
High
CVE-2025-24036
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
7.0
High