Lucene search
+L

281 matches found

Microsoft CVE
Microsoft CVE
•added 2025/09/09 7:00 a.m.•150 views

Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

7.8CVSS6.8AI score0.00424EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•13 views

PT-2025-36896

Name of the Vulnerable Software and Affected Versions: Microsoft AutoUpdate affected versions not specified Description: An improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally. Recommendations: At the...

7.8CVSS6AI score0.00424EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•1 views

CVE-2025-55317: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00424EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•12 views

Microsoft AutoUpdate for Mac 后置链接漏洞

Microsoft AutoUpdate for Mac is a Microsoft product automatic update application for the Mac platform from Microsoft Corporation USA. Microsoft AutoUpdate for Mac suffers from a backlink vulnerability. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS6.5AI score0.00424EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/09 12:00 a.m.•10 views

Microsoft AutoUpdate for macOS < 4.80 Elevation of Privilege (September 2025)

The version of Microsoft AutoUpdate installed on the remote macOS ost is prior to 4.80. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate...

7.8CVSS5.5AI score0.00424EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2019-17561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Apache NetBeans autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. Apache...

7.5CVSS7.1AI score0.01675EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2025/07/04 12:00 a.m.•138 views

📄 Microsoft AutoUpdate Privilege Escalation

Microsoft AutoUpdate MAU suffers from a privilege escalation vulnerability. Titles: CVE-2025-47968-Core-Logic Microsoft AutoUpdate MAU Elevation of Privilege Vulnerability Author: nu11secur1ty Date: 07/03/2025 Vendor: https://www.microsoft.com/en-us Software:...

7.8CVSS6.6AI score0.00389EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/06/20 12:00 a.m.•15 views

The vulnerability of the Microsoft AutoUpdate (MAU) for Mac application, which involves insufficient validation of input data, allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft AutoUpdate MAU for Mac application related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.5AI score0.00389EPSS
SaveExploits1References2
OSV
OSV
•added 2025/06/19 6:15 p.m.•13 views

CVE-2025-33117

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands...

9.1CVSS6AI score0.00552EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/06/19 6:15 p.m.•5 views

CVE-2025-33117

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands...

9.1CVSS6AI score0.00552EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/06/19 5:16 p.m.•65 views

CVE-2025-33117

CVE-2025-33117 affects IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12. A privileged user could modify critical configuration files, enabling the upload of a malicious autoupdate file to execute arbitrary commands. This aligns with IBM’s bulletin noting high-severity impact and a fix...

9.1CVSS9.4AI score0.00552EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2025/06/13 12:00 a.m.•13 views

Microsoft AutoUpdate for Mac Elevation of Privilege Vulnerability

Microsoft AutoUpdate for Mac is a Microsoft product auto-update application for the Mac platform from Microsoft Corporation USA. Microsoft AutoUpdate for Mac suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

7.8CVSS7.1AI score0.00389EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/12 5:06 p.m.•7 views

CVE-2025-47968

Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00389EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/10 5:24 p.m.•8 views

CVE-2025-47968

Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00389EPSS
SaveExploits1References1
NVD
NVD
•added 2025/06/10 5:24 p.m.•19 views

CVE-2025-47968

Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00389EPSS
SaveExploits1References1
CVE
CVE
•added 2025/06/10 5:02 p.m.•94 views

CVE-2025-47968

CVE-2025-47968 is a local privilege-escalation vulnerability in Microsoft AutoUpdate (MAU) due to improper input validation. Affected product: MAU (Mac). The CVSS v3.1 metrics indicate Local attack vector, Low attack complexity, Low privileges required, but High impact on confidentiality, integri...

7.8CVSS7.5AI score0.00389EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/06/10 5:02 p.m.•26 views

CVE-2025-47968 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

...

7.8CVSS0.00389EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/06/10 5:02 p.m.•6 views

CVE-2025-47968 Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

...

7.8CVSS7.2AI score0.00389EPSS
SaveExploits1References1
Kaspersky
Kaspersky
•added 2025/06/10 12:00 a.m.•94 views

KLA84759 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Word can be...

8.8CVSS8.8AI score0.2116EPSS
SaveExploits13References37
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•1 views

CVE-2025-47968: Improper Input Validation

Improper input validation in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.00389EPSS
SaveExploits1References1
Rows per page
Query Builder