PatchTheCVEautoupdate vulnerabilities and fixes
Recent CVEs affecting autoupdate, with upgrade or downgrade steps. 7 tracked.
autoupdate has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-09-09. Highest priority: CVE-2025-29801 (score 48/100).
- CVE-2024-43492 HIGH 7.8 UPGRADE Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
- CVE-2025-55317 HIGH 7.8 UPGRADE Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authori
- CVE-2025-47968 HIGH 7.8 UPGRADE Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges lo
- CVE-2025-29801 HIGH 7.8 UPGRADE Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privilege
- CVE-2025-29800 HIGH 7.8 UPGRADE Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privilege
- CVE-2025-24036 HIGH 7.0 UPGRADE Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
- CVE-2025-21360 HIGH 7.8 UPGRADE Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
FAQ
How do I fix autoupdate vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is autoupdate being exploited right now?
None of the tracked autoupdate CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which autoupdate CVE should I patch first?
CVE-2025-29801 currently ranks highest (48/100): Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privilege.