CVE-2024-7995

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@autodesk.com

Published

2024-11-05

Last modified

2025-08-26

Weaknesses

CWE-426

Affected products

• Vred (Autodesk)
• Vred Design (Autodesk)

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0022