CVE-2021-27032
Autodesk Licensing Services was found to be vulnerable to privilege escalation issues. A limited...
Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.
- Record
CVE-2021-27032- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-276
- Updated
- 2026-11-02
CVE List No score
Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.
- Record
CVE-2021-27032- Updated
- 2026-11-02
EUVDEUVD-2021-13803 No score
Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.
- Record
EUVD-2021-13803- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ghc3-cx2g-84m5 No score
Autodesk Licensing Services was found to be vulnerable to privilege escalation issues. A limited...
Autodesk Licensing Services was found to be vulnerable to privilege escalation issues. A limited privileges malicious user could run any number of tools on a system to identify services which are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration, and take ownership of the service. This issue was found by an external security researcher.
- Record
GHSA-ghc3-cx2g-84m5- Weakness
- CWE-276
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-27032 is a high vulnerability (CVSS 7.8) in Autodesk Licensing Services, published May 28, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. No source names a fixed version.
References
knowledge.autodesk.com/search-result/caas/downloads/content/autodesk-licensing-service-download.html
autodesk.com/trust/security-advisories/adsk-sa-2021-0002%3B
autodesk.com/trust/security-advisories/adsk-sa-2021-0002
nvd.nist.gov/vuln/detail/CVE-2021-27032
knowledge.autodesk.com/search-result/caas/downloads/content/autodesk-licensing-service-release-notes.html?collection=310021
autodesk.com/trust/security-advisories/adsk-sa-2021-0002;
github.com/advisories/GHSA-ghc3-cx2g-84m5