https://vulnogram.org/ Most recent CVEs assigned by Autodesk (autodesk). https://vulnogram.org/seaview/icons/autodesk.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-15102 https://vulnogram.org/CVE-2026-15102 ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services. High Wed, 14 Oct 2026 16:29:10 GMT https://vulnogram.org/CVE-2026-85217 https://vulnogram.org/CVE-2026-85217 A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion netwo… High Thu, 10 Sep 2026 13:29:58 GMT https://vulnogram.org/CVE-2026-14255 https://vulnogram.org/CVE-2026-14255 A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a d… Medium Wed, 02 Sep 2026 14:29:56 GMT https://vulnogram.org/CVE-2026-19568 https://vulnogram.org/CVE-2026-19568 A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Mon, 24 Aug 2026 20:59:44 GMT https://vulnogram.org/CVE-2026-7455 https://vulnogram.org/CVE-2026-7455 A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context… High Mon, 24 Aug 2026 20:58:30 GMT https://vulnogram.org/CVE-2026-16783 https://vulnogram.org/CVE-2026-16783 A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context… High Mon, 24 Aug 2026 20:56:43 GMT https://vulnogram.org/CVE-2026-16782 https://vulnogram.org/CVE-2026-16782 A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of… Medium Network Exploitable Mon, 24 Aug 2026 20:56:16 GMT https://vulnogram.org/CVE-2026-16781 https://vulnogram.org/CVE-2026-16781 A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-… Medium Mon, 24 Aug 2026 20:55:41 GMT https://vulnogram.org/CVE-2026-14479 https://vulnogram.org/CVE-2026-14479 A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vu… Medium Wed, 12 Aug 2026 14:54:58 GMT https://vulnogram.org/CVE-2026-14478 https://vulnogram.org/CVE-2026-14478 A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality,… High Wed, 12 Aug 2026 14:54:05 GMT https://vulnogram.org/CVE-2026-7406 https://vulnogram.org/CVE-2026-7406 A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Thu, 06 Aug 2026 16:31:12 GMT https://vulnogram.org/CVE-2026-7405 https://vulnogram.org/CVE-2026-7405 A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service Medium Thu, 06 Aug 2026 16:17:54 GMT https://vulnogram.org/CVE-2026-11803 https://vulnogram.org/CVE-2026-11803 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of th… High Thu, 06 Aug 2026 15:58:36 GMT https://vulnogram.org/CVE-2026-8325 https://vulnogram.org/CVE-2026-8325 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of… High Thu, 06 Aug 2026 15:58:02 GMT https://vulnogram.org/CVE-2026-1289 https://vulnogram.org/CVE-2026-1289 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the… High Thu, 06 Aug 2026 15:57:13 GMT https://vulnogram.org/CVE-2026-10710 https://vulnogram.org/CVE-2026-10710 A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the c… High Tue, 04 Aug 2026 12:59:51 GMT https://vulnogram.org/CVE-2026-10709 https://vulnogram.org/CVE-2026-10709 A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in th… High Tue, 04 Aug 2026 12:59:07 GMT https://vulnogram.org/CVE-2026-17550 https://vulnogram.org/CVE-2026-17550 A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information. Medium Wed, 29 Jul 2026 15:23:16 GMT https://vulnogram.org/CVE-2026-16465 https://vulnogram.org/CVE-2026-16465 A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information. Medium Wed, 29 Jul 2026 15:22:42 GMT https://vulnogram.org/CVE-2026-16463 https://vulnogram.org/CVE-2026-16463 A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of… High Wed, 29 Jul 2026 15:22:16 GMT https://vulnogram.org/CVE-2026-10789 https://vulnogram.org/CVE-2026-10789 A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code… Critical Network Exploitable Mon, 22 Jun 2026 17:15:25 GMT https://vulnogram.org/CVE-2026-1288 https://vulnogram.org/CVE-2026-1288 A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service con… Medium Wed, 17 Jun 2026 15:27:54 GMT https://vulnogram.org/CVE-2026-7454 https://vulnogram.org/CVE-2026-7454 A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Tue, 26 May 2026 17:09:08 GMT https://vulnogram.org/CVE-2026-7453 https://vulnogram.org/CVE-2026-7453 A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condition. Medium Tue, 26 May 2026 17:08:40 GMT https://vulnogram.org/CVE-2026-7452 https://vulnogram.org/CVE-2026-7452 A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Tue, 26 May 2026 17:06:35 GMT https://vulnogram.org/CVE-2026-7451 https://vulnogram.org/CVE-2026-7451 A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context… High Tue, 26 May 2026 17:05:56 GMT https://vulnogram.org/CVE-2026-7450 https://vulnogram.org/CVE-2026-7450 A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition. Medium Tue, 26 May 2026 17:05:25 GMT https://vulnogram.org/CVE-2026-4344 https://vulnogram.org/CVE-2026-4344 A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious… High Tue, 14 Apr 2026 13:56:56 GMT https://vulnogram.org/CVE-2026-4345 https://vulnogram.org/CVE-2026-4345 A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local… High Tue, 14 Apr 2026 13:56:22 GMT https://vulnogram.org/CVE-2026-4369 https://vulnogram.org/CVE-2026-4369 A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A ma… High Tue, 14 Apr 2026 13:47:01 GMT https://vulnogram.org/CVE-2026-0875 https://vulnogram.org/CVE-2026-0875 A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in t… High Wed, 18 Feb 2026 19:39:27 GMT https://vulnogram.org/CVE-2026-0874 https://vulnogram.org/CVE-2026-0874 A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in… High Wed, 18 Feb 2026 19:38:32 GMT https://vulnogram.org/CVE-2026-0536 https://vulnogram.org/CVE-2026-0536 A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Wed, 04 Feb 2026 18:12:56 GMT https://vulnogram.org/CVE-2026-0662 https://vulnogram.org/CVE-2026-0662 A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized. High Wed, 04 Feb 2026 16:28:31 GMT https://vulnogram.org/CVE-2026-0660 https://vulnogram.org/CVE-2026-0660 A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Wed, 04 Feb 2026 16:27:40 GMT https://vulnogram.org/CVE-2026-0661 https://vulnogram.org/CVE-2026-0661 A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Wed, 04 Feb 2026 16:27:13 GMT https://vulnogram.org/CVE-2026-0537 https://vulnogram.org/CVE-2026-0537 A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Wed, 04 Feb 2026 16:26:01 GMT https://vulnogram.org/CVE-2026-0538 https://vulnogram.org/CVE-2026-0538 A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Wed, 04 Feb 2026 16:24:36 GMT https://vulnogram.org/CVE-2026-0659 https://vulnogram.org/CVE-2026-0659 A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the curren… High Wed, 04 Feb 2026 16:01:27 GMT https://vulnogram.org/CVE-2026-0535 https://vulnogram.org/CVE-2026-0535 A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability… High Network Exploitable Thu, 22 Jan 2026 16:59:34 GMT https://vulnogram.org/CVE-2026-0534 https://vulnogram.org/CVE-2026-0534 A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to rea… High Network Exploitable Thu, 22 Jan 2026 16:59:01 GMT https://vulnogram.org/CVE-2026-0533 https://vulnogram.org/CVE-2026-0533 A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious act… High Network Exploitable Thu, 22 Jan 2026 16:58:43 GMT https://vulnogram.org/CVE-2025-10900 https://vulnogram.org/CVE-2025-10900 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in… High Mon, 15 Dec 2025 23:45:26 GMT https://vulnogram.org/CVE-2025-10899 https://vulnogram.org/CVE-2025-10899 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in… High Mon, 15 Dec 2025 23:45:00 GMT https://vulnogram.org/CVE-2025-10898 https://vulnogram.org/CVE-2025-10898 A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in t… High Mon, 15 Dec 2025 23:44:26 GMT https://vulnogram.org/CVE-2025-10889 https://vulnogram.org/CVE-2025-10889 A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Mon, 15 Dec 2025 23:43:57 GMT https://vulnogram.org/CVE-2025-10888 https://vulnogram.org/CVE-2025-10888 AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in… High Mon, 15 Dec 2025 23:43:22 GMT https://vulnogram.org/CVE-2025-10887 https://vulnogram.org/CVE-2025-10887 A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Mon, 15 Dec 2025 23:42:44 GMT https://vulnogram.org/CVE-2025-10886 https://vulnogram.org/CVE-2025-10886 A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. High Mon, 15 Dec 2025 23:42:09 GMT https://vulnogram.org/CVE-2025-10884 https://vulnogram.org/CVE-2025-10884 AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code i… High Mon, 15 Dec 2025 23:41:34 GMT