CVE-2025-10885
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-06

Last updated on: 2025-11-12

Assigner: Autodesk

Description
A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM due to an insufficient validation of loaded binaries. An attacker with local and low-privilege access could exploit this to execute code as SYSTEM.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-06
Last Modified
2025-11-12
Generated
2026-06-16
AI Q&A
2025-11-06
EPSS Evaluated
2026-06-15
NVD
CVE-2025-10885
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
autodesk installer to 2.19 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
CWE-250 The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves a maliciously crafted file that, when executed on a victim's machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM. It occurs due to insufficient validation of loaded binaries, allowing an attacker with local and low-privilege access to execute code with SYSTEM-level privileges.

Impact Analysis

The vulnerability can allow an attacker with local, low-privilege access to escalate their privileges to SYSTEM level, potentially gaining full control over the affected system. This can lead to unauthorized code execution, data compromise, and disruption of system operations.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-10885. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart