7.8
High
CVE-2025-5335 A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to…
Description
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Installer 2.13 | 2.13 → < 2.15 | 2.15 |
Other CVEs of Installer
The 5 CVEs of Installer →
CVE-2026-14479
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper…
5.5
Medium
CVE-2026-14478
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to…
7.8
High
CVE-2025-10885
A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT…
7.8
High
CVE-2024-9500
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer…
7.8
High