globalprotect-ca-cert-ipc

c2us.exe - 以登录用户在桌面会话中的身份启动命令。在本例中，以 SYSTEM 身份在非特权用户的桌面会话中启动 cmd.exe。 c2us.c - c2us.exe 的源代码。 epinject.exe - 入口点注入器，用于生成新进程并在其入口点注入代码。 loadgpsend.bin - 使用 epinject.exe 注入 PanGPA.exe 的载荷，用于运行主漏洞利用主体 c:\windows\temp\gpsend.dll crypt.c - 与 Globalprotect 兼容的加密实现。 gpcaupgrade.c - 主要漏洞利用代码。 gpupgrade.d...

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

PT-2026-71096

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A local low-privileged attacker can execute a maliciously created executable on a victim's machine to inject unauthenticated Inter-Process Communication IPC...