VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 10, 2025· Updated Feb 26, 2026

Privilege Ecalation due to Untrusted Search Path Vulnerability

CVE-2025-5335

Description

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution.

Affected products

2
  • Autodesk/Installerv5
    cpe:2.3:a:autodesk:installer:2.13:*:*:*:*:*:*:*
    Range: 2.13
  • Inno Setup/Installerllm-fuzzy

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.