CVE-2025-60320 | BDVDB-2026-299983 Detail

Description#

memoQ 10.1.13.ef1b2b52aae and earlier contains an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The affected service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to SYSTEM by placing a malicious executable at C:\Program.exe.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-10-29Record published in the CVE List.
2. Version 22025-10-30Most recent update recorded in the CVE List.