CVE-2025-24036: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

CVE-2023-32002: HackerOne: CVE-2023-32002 Node.js `Module._load()` policy Remote Code Execution Vulnerability

CVE-2025-21259: Microsoft Outlook Spoofing Vulnerability

CVE-2025-24039: Visual Studio Code Elevation of Privilege Vulnerability

CVE-2025-21406: Windows Telephony Service Remote Code Execution Vulnerability

**What privileges could be gained by an attacker who successfully exploited the vulnerability?**

An attacker who successfully exploits this vulnerability could elevate their privileges to perform commands as Root in the target environment.

Headline

CVE-2025-24036: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

Microsoft Security Response Center: Latest News