CVE-2025-10885CWE-250

CVE-2025-10885

High · published November 6, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

⚡ A crafty little file is your worst enemy here! This vulnerability lets an attacker with low privileges escalate to full SYSTEM access, turning your computer into their playground! 🔥 Think of it like a mischievous child sneaking into the kitchen. They can’t reach the top shelf for cookies, but if they somehow get a boost from a friend, they can grab all the sweets without anyone stopping them! An attacker could exploit this vulnerability to run code with SYSTEM privileges, potentially allowing them to install malware, steal sensitive data, or wreak havoc on your system! This could lead to an absolute nightmare for security and privacy, giving the attacker the keys to the kingdom!

Put simply

Think of it like a mischievous child sneaking into the kitchen. They can’t reach the top shelf for cookies, but if they somehow get a boost from a friend, they can grab all the sweets without anyone stopping them! This vulnerability arises from insufficient validation of loaded binaries, enabling a local attacker with low privileges to execute arbitrary code as the NT AUTHORITY/SYSTEM user.

What to do

An attacker could exploit this vulnerability to run code with SYSTEM privileges, potentially allowing them to install malware, steal sensitive data, or wreak havoc on your system! This could lead to an absolute nightmare for security and privacy, giving the attacker the keys to the kingdom! To mitigate this risk, ensure that your systems are updated with the latest security patches. Review your application configurations and consider implementing stricter binary validation processes. Regularly audit user permissions to limit the opportunity for exploitation. You've got this! By following these steps, you'll shore up your defenses and keep the bad guys at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.4th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-11-06T22:15Z
Affected products (1)
ProductVersionsFixed in
autodesk/installer< 2.192.19
References (2)
EPSS history
Timeline
  • 06 NOV 17:01Z
    Privilege Escalation Vulnerability
    cvelistv5