CVEvulnerability

CVE-2025-60320

6.7 MEDIUM Published 2025-10-29 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-10-29
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-428

Description

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to SYSTEM by placing a malicious executable at C:\Program.exe.

Weakness · CWE (1)

CWE-428 Unquoted Search Path or Element weakness

References

https://docs.memoq.com/helpcenter/ docs.memoq.com
https://github.com/joseraeiro/security-advisories/blob/e0b1095de8b3162fb0d9de9a688317a12fdd9be8/CVE-2025-60320.md github.com
https://github.com/joseraeiro/security-advisories/blob/e0b1095de8b3162fb0d9de9a688317a12fdd9be8/CVE-2025-60320.md github.com

CVE-2025-60320

Description

Related

Weakness · CWE (1)

References