7.8
Élevée
CVE-2025-5335 A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to…
Description
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Installer 2.13 | 2.13 → < 2.15 | 2.15 |
Autres CVE de Installer
Les 5 CVE de Installer →
CVE-2026-14479
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper…
5.5
Moyenne
CVE-2026-14478
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to…
7.8
Élevée
CVE-2025-10885
A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT…
7.8
Élevée
CVE-2024-9500
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer…
7.8
Élevée