HIGH🇵🇱 Wersja polska

CVE-2025-5335

CVSS 7.8v3.1pub. 2025-06-10upd. 2025-11-13

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • Autodesk Installer

    APP
    Autodesk
    < 2.15
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-14478HIGH7.8same product

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged atta...

CVE-2025-10885HIGH7.8same product

A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTH...

CVE-2024-9500HIGH7.8same product

A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk I...

CVE-2023-27908HIGH7.8same product

A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer wh...

CVE-2026-14479MEDIUM5.5same product

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper v...