CVE-2025-10885

Katalog CVE

CVSS 7.8 · High EPSS 0,16%

Kerentanan Execution with Unnecessary Privileges pada autodesk installer. Skor CVSS 3.1 7.8 (High) menurut autodesk.com.

Deskripsi (NVD)

A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM due to an insufficient validation of loaded binaries. An attacker with local and low-privilege access could exploit this to execute code as SYSTEM.

Rincian

Terbit di NVD

6 November 2025

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber autodesk.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-250: Execution with Unnecessary Privileges

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 5,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0022 advisory vendor
• https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe product