CVE-2026-14478Incorrect Permission Assignment in Autodesk Installer Named Pipes

Beschreibung

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0013 vendor-advisoryVendor Advisory
• https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe patchProduct