Vulnerability Details CVE-2026-14478
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.3%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2026-14478
-
cpe:2.3:a:autodesk:installer:2.10.0.17
-
cpe:2.3:a:autodesk:installer:2.10.0.20
-
cpe:2.3:a:autodesk:installer:2.13
-
cpe:2.3:a:autodesk:installer:2.15
-
cpe:2.3:a:autodesk:installer:2.17
-
cpe:2.3:a:autodesk:installer:2.18
-
cpe:2.3:a:autodesk:installer:2.19
-
cpe:2.3:a:autodesk:installer:2.21