7.8
High
CVE-2025-10885 A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT…
Description
A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM due to an insufficient validation of loaded binaries. An attacker with local and low-privilege access could exploit this to execute code as SYSTEM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Installer 2.18 | 2.18 → < 2.19 | 2.19 |
Other CVEs of Installer
The 5 CVEs of Installer →
CVE-2026-14479
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper…
5.5
Medium
CVE-2026-14478
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to…
7.8
High
CVE-2025-5335
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to…
7.8
High
CVE-2024-9500
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer…
7.8
High