Microsoft AutoUpdate Privilege Escalation Vulnerability

A vulnerability allowing improper input validation in Microsoft AutoUpdate (MAU) for Mac has been identified, which could enable an authorized attacker to locally elevate privileges. This issue arises because the application does not properly validate input, allowing attackers to manipulate installers and gain higher-level access.

Impact

Exploitation of this vulnerability could allow an attacker to gain ROOT privileges on the affected system.

Reproduction

To exploit this vulnerability, an attacker could download an installer and replace it with a malicious version before it is executed. Once the victim runs the altered installer, the attacker could use it to elevate privileges.

Remediation

Users can refer to the Microsoft AutoUpdate for Mac Security Update for addressing this vulnerability.