7.8
High
CVE-2026-14478 A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to…
Description
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Installer 2.22 | 2.22.0 → < 2.23.0 | 2.23.0 |
Other CVEs of Installer
The 5 CVEs of Installer →
CVE-2026-14479
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper…
5.5
Medium
CVE-2025-10885
A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT…
7.8
High
CVE-2025-5335
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to…
7.8
High
CVE-2024-9500
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer…
7.8
High