CVE Program partner

autodesk

Autodesk

API
CVEs, 365 days66360 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationAutodesk
RoleCNA
TypeVendor
Reports tomitre
ScopeAll currently supported <a href='https://knowledge.autodesk.com/support' target='_blank'>Autodesk Applications and Cloud Services</a>.
Advisorieshttps://www.autodesk.com/trust/security-advisories

Latest CVEs · RSS

  • CVE-2026-15102 2026-10-14 · CVSS 7.5
    ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized a
  • CVE-2026-85217 2026-09-10 · CVSS 8.6
    A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or
  • CVE-2026-14255 2026-09-02 · CVSS 5.5
    A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may levera
  • CVE-2026-19568 2026-08-24 · CVSS 7.8
    A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerabi
  • CVE-2026-7455 2026-08-24 · CVSS 7.8
    A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulner
  • CVE-2026-16783 2026-08-24 · CVSS 7.8
    A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulner
  • CVE-2026-16782 2026-08-24 · CVSS 5.3
    A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnera
  • CVE-2026-16781 2026-08-24 · CVSS 5.5
    A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this v
  • CVE-2026-14479 2026-08-12 · CVSS 5.5
    A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset
  • CVE-2026-14478 2026-08-12 · CVSS 7.8
    A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into n
  • CVE-2026-7406 2026-08-06 · CVSS 7.8
    A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can le
  • CVE-2026-7405 2026-08-06 · CVSS 5.5
    A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library
  • CVE-2026-11803 2026-08-06 · CVSS 7.8
    A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this
  • CVE-2026-8325 2026-08-06 · CVSS 7.8
    A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Out-of-Bounds Write vulnerability. A malicious actor may leverage thi
  • CVE-2026-1289 2026-08-06 · CVSS 7.8
    A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vul
  • CVE-2026-10710 2026-08-04 · CVSS 7.8
    A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicio
  • CVE-2026-10709 2026-08-04 · CVSS 7.8
    A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectio
  • CVE-2026-17550 2026-07-29 · CVSS 5.5
    A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this
  • CVE-2026-16465 2026-07-29 · CVSS 6.1
    A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this
  • CVE-2026-16463 2026-07-29 · CVSS 7.8
    A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnera
  • CVE-2026-10789 2026-06-22 · CVSS 9.6
    A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP
  • CVE-2026-1288 2026-06-17 · CVSS 5.5
    A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Succ
  • CVE-2026-7454 2026-05-26 · CVSS 7.8
    A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerabi
  • CVE-2026-7453 2026-05-26 · CVSS 5.5
    A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condition.
  • CVE-2026-7452 2026-05-26 · CVSS 7.8
    A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerabi

All CVE Program partners