CVE-2025-60320 | THREATINT

Description

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to SYSTEM by placing a malicious executable at C:\Program.exe.

PUBLISHED Reserved 2025-09-26 | Published 2025-10-29 | Updated 2025-10-30 | Assigner mitre

References

docs.memoq.com/helpcenter/

github.com/...162fb0d9de9a688317a12fdd9be8/CVE-2025-60320.md

cve.org (CVE-2025-60320)

nvd.nist.gov (CVE-2025-60320)

Download JSON