CVE-2026-14478

Katalog CVE

CVSS 7.8 · High EPSS 0,15%

Kerentanan Incorrect Permission Assignment for Critical Resource pada autodesk installer. Skor CVSS 3.1 7.8 (High) menurut autodesk.com.

Deskripsi (NVD)

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.

Rincian

Terbit di NVD

12 Agustus 2026

Terakhir diubah

4 September 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber autodesk.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 3,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0013 advisory vendor
• https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe product