CVE-2024-9500

Summary

CVE-2024-9500 is a newly disclosed vulnerability affecting Autodesk Installer. Malicious DLL files placed in temporary folders utilized by the installer can exploit insecure privilege management, granting attackers elevated privileges up to NT AUTHORITY/SYSTEM levels. This flaw potentially enables attackers to gain administrative control over affected systems. Users are advised to install patches promptly to mitigate the risk. Autodesk has released a patch to address this vulnerability. Until then, users should be cautious of untrusted DLL files and avoid installing software from unverified sources.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.