Elevation of Privilege Vulnerability in Microsoft AutoUpdate by Microsoft
CVE-2025-24036
7HIGH
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 11 February 2025
What is CVE-2025-24036?
A security vulnerability in Microsoft AutoUpdate can allow an attacker to gain elevated privileges on affected installations, potentially leading to unauthorized access and control over the system. This issue highlights the importance of keeping software up-to-date and maintaining a strong security posture to mitigate risks associated with such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Microsoft AutoUpdate for Mac Unknown 0 < 4.78.25022527
References
CVSS V3.1
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved