Microsoft Microsoft AutoUpdate for Mac

Name: Microsoft Microsoft AutoUpdate for Mac
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-54897US	—	21.7% (98th)	Exploit	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-47166US	—	21.6% (98th)	Exploit	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47175US	—	2.39% (84th)	Exploit	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47165US	—	2.19% (82nd)	Exploit	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47171US	—	1.68% (77th)	Exploit	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47957US	—	1.31% (71st)	Exploit	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47176US	—	0.75% (55th)	Exploit	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47163US	—	20.9% (98th)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47172US	—	1.75% (78th)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-55243US	—	1.16% (67th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-29801US	—OT elevated	1.06% (65th)	—	4.78	2025-04-08	4.0.0 → 4.78
CVE-2025-29800US	—	1.06% (65th)	—	4.78	2025-04-08	4.0.0 → 4.78
CVE-2020-0984US	high7.8	0.99% (62nd)	—	no fix	2020-04-15	≤ unspecified
CVE-2025-53799US	—	0.84% (58th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54906US	—	0.79% (56th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-47162US	—	0.76% (55th)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47167US	—	0.67% (52nd)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47169US	—	0.65% (51st)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47164US	—	0.65% (51st)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-47170US	—	0.65% (51st)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-54901US	—	0.64% (51st)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-47168US	—	0.64% (50th)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-54905US	—	0.62% (50th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54910US	—	0.61% (49th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54908US	—	0.59% (48th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-47173US	—	0.58% (48th)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-54904US	—	0.57% (47th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54903US	—	0.57% (47th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54902US	—	0.57% (47th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54900US	—	0.57% (47th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54899US	—	0.57% (47th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54898US	—	0.57% (47th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-54896US	—	0.57% (47th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-47953US	—	0.54% (45th)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2025-54907US	—	0.51% (43rd)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-47174US	—	0.49% (42nd)	—	no fix	2025-06-10	≤ vers:unknown/<4.79
CVE-2024-43492US	—	0.48% (41st)	—	4.72	2024-09-10	0 → 4.72
CVE-2025-21360US	—	0.45% (39th)	—	4.76	2025-01-14	3 versions
CVE-2025-55317US	—	0.42% (36th)	—	4.80	2025-09-09	4 versions
CVE-2025-47968US	—	0.40% (34th)	—	4.79	2025-06-10	2 versions
CVE-2025-24036US	—	0.36% (30th)	—	4.78.25022527	2025-02-11	4.0.0 → 4.78.25022527

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free12 CVEs
CWE-122Heap-based Buffer Overflow6 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-269Improper Privilege Management3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-641Improper Restriction of Names for Files and Other Resources2 CVEs
CWE-126Buffer Over-read1 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)35 CVEs
EUEU Vulnerability Database (ENISA)8 CVEs
USMicrosoft MSRC (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan