CVE-2025-24036 is an Elevation of Privilege vulnerability affecting Microsoft AutoUpdate. With a CVSS score of 7.0 (HIGH), successful exploitation could lead to high confidentiality, integrity, and availability impacts, requiring local access and high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion beyond a single media report.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.77.24121924CPE matchmatch criteria | cpe:2.3:a:microsoft:autoupdate:*:*:*:*:*:macos:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.