autodesk Vulnerability Advisory Catalog

Total 364 security vulnerabilities recorded for autodesk software and firmware.

← Back to All Vendors
CVE-2026-10789 CRITICAL
Component: fusion

A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability ...

๐Ÿ“… 2026-06-22
CVSS 9.6 Dossier →
CVE-2026-1288 MEDIUM
Component: revit

A maliciously crafted RFA file, when converted to FormIt via โ€œConvert RFA to FormItโ€ in Autodesk Revit, can force a NULL Pointer Dereference vulnerabi...

๐Ÿ“… 2026-06-17
CVSS 5.5 Dossier →
Component: 3ds_max

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this...

๐Ÿ“… 2026-05-26
CVSS 7.8 Dossier →
CVE-2026-7453 MEDIUM
Component: 3ds_max

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condi...

๐Ÿ“… 2026-05-26
CVSS 5.5 Dossier →
Component: 3ds_max

A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this...

๐Ÿ“… 2026-05-26
CVSS 7.8 Dossier →
Component: 3ds_max

A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage t...

๐Ÿ“… 2026-05-26
CVSS 7.8 Dossier →
CVE-2026-7450 MEDIUM
Component: 3ds_max

A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Dereference vulnerability. Successful exploitation may ...

๐Ÿ“… 2026-05-26
CVSS 5.5 Dossier →
Component: fusion

A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigge...

๐Ÿ“… 2026-04-14
CVSS 7.1 Dossier →
Component: fusion

A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the ...

๐Ÿ“… 2026-04-14
CVSS 7.1 Dossier →
Component: fusion

A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stor...

๐Ÿ“… 2026-04-14
CVSS 7.1 Dossier →
Component: shared_components

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may...

๐Ÿ“… 2026-02-18
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor m...

๐Ÿ“… 2026-02-18
CVSS 7.8 Dossier →
Component: 3ds_max

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can lev...

๐Ÿ“… 2026-02-04
CVSS 7.8 Dossier →
Component: 3ds_max

A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the ...

๐Ÿ“… 2026-02-04
CVSS 7.8 Dossier →
Component: 3ds_max

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this...

๐Ÿ“… 2026-02-04
CVSS 8.4 Dossier →
Component: 3ds_max

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can lev...

๐Ÿ“… 2026-02-04
CVSS 8.4 Dossier →
Component: 3ds_max

A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage t...

๐Ÿ“… 2026-02-04
CVSS 8.4 Dossier →
Component: 3ds_max

A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this...

๐Ÿ“… 2026-02-04
CVSS 8.4 Dossier →
Component: fusion

A maliciously crafted HTML payload, stored in a componentโ€™s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnera...

๐Ÿ“… 2026-01-22
CVSS 8.1 Dossier →
Component: fusion

A maliciously crafted HTML payload, stored in a partโ€™s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability ...

๐Ÿ“… 2026-01-22
CVSS 8.1 Dossier →
Component: fusion

A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored ...

๐Ÿ“… 2026-01-22
CVSS 8.1 Dossier →
Component: shared_components

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can...

๐Ÿ“… 2025-12-16
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can...

๐Ÿ“… 2025-12-16
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leve...

๐Ÿ“… 2025-12-16
CVSS 7.8 Dossier →
Page 1 of 16 (364 Total Records)