CVE-2026-14478: Installer: hatalı izin ataması

Açıklama (NVD)

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.

Özet bilgiler

Ürün

Autodesk Installer

CVSS v3.1

7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,15 (yüzdelik 4)

CWE

CWE-732

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• emsfs.autodesk.com
• www.autodesk.com
• CWE-732