Elevation of Privilege Vulnerability in Microsoft AutoUpdate for Mac
CVE-2020-0984

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Microsoft Autoupdate For Mac
Vendor
CVE Published:
15 April 2020

Summary

An elevation of privilege vulnerability occurs within Microsoft AutoUpdate for Mac when the application fails to properly validate updates prior to execution. This flaw could allow unauthorized users to execute arbitrary code with the privileges of the affected application, potentially compromising the security of the user's system. It’s essential for users to apply available updates to mitigate the risk associated with this vulnerability.

Affected Version(s)

Microsoft AutoUpdate for Mac = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.