CVE-2025-5039CWE-426

Privilege Ecalation due to Untrusted Search Path Vulnerability

High · published July 24, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00192 · 8.4th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2025-07-24T17:11Z
EPSS history
Timeline
  • 24 JUL 17:11Z
    Privilege Ecalation due to Untrusted Search Path Vulnerability
    cvelistv5