PT-2025-44347 · Memoq · Memoq+1

Published 2025-10-29 · Updated 2025-10-29 · CVE-2025-60320

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions memoQ versions 10.1.13.ef1b2b52aae and earlier

Description memoQ versions 10.1.13.ef1b2b52aae and earlier contain an unquoted service path vulnerability in the memoQ Auto Update Service (memoQauhlp101). The service is installed with a path containing spaces and without surrounding quotes. This misconfiguration allows local users to escalate privileges to SYSTEM by placing a malicious executable at C:Program.exe.

Recommendations memoQ versions prior to 10.1.13.ef1b2b52aae should be updated.

Exploit

Fix

LPE

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2025-60320

Affected Products

Memoq

Memoq Auto Update Service

References · 7

• 🔥 https://github.com/joseraeiro/security-advisories/blob/e0b1095de8b3162fb0d9de9a688317a12fdd9be8/CVE-2025-60320.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60320 · Security Note
• https://twitter.com/CVEnew/status/1983619154478346496 · Twitter Post
• https://t.me/CVEtracker/36116 · Telegram Post
• https://t.me/cveNotify/140900 · Telegram Post
• https://docs.memoq.com/helpcenter · Note
• https://twitter.com/VulmonFeeds/status/1983637979131154436 · Twitter Post