- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 09/13/2026, Autodesk recorded 21 security vulnerabilities in the last 90 days across 9 products, including 13 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Revit had the most security vulnerabilities in the Autodesk ecosystem, with 6 vulnerabilities—approximately 28.57% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-85217Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published09/10/2026 | SeverityHigh |
CVE-2026-14255IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published09/02/2026 | SeverityMedium |
CVE-2026-19568SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/24/2026 | SeverityHigh |
CVE-2026-7455FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/24/2026 | SeverityHigh |
CVE-2026-16783ABC File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/24/2026 | SeverityHigh |
CVE-2026-16782SVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/24/2026 | SeverityMedium |
CVE-2026-16781SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/24/2026 | SeverityMedium |
CVE-2026-14479Denial of Service in Autodesk Installer IPC Channel | Exploitation statusNot known exploited | FixYes | Affected productInstaller | Published08/12/2026 | SeverityMedium |
CVE-2026-14478Incorrect Permission Assignment in Autodesk Installer Named Pipes | Exploitation statusNot known exploited | FixYes | Affected productInstaller | Published08/12/2026 | SeverityHigh |
CVE-2026-7406BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published08/06/2026 | SeverityHigh |
CVE-2026-7405TIF File Parsing Out-of-Bounds Read in certain Autodesk products | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published08/06/2026 | SeverityMedium |
CVE-2026-11803PDF File Parsing Out-of-Bounds Read Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published08/06/2026 | SeverityHigh |
CVE-2026-8325PDF File Parsing Out-of-Bounds Write Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published08/06/2026 | SeverityHigh |
CVE-2026-1289PDF File Parsing Use-After-Free Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published08/06/2026 | SeverityHigh |
CVE-2026-10710FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK | Exploitation statusNot known exploited | FixYes | Affected productFBX SDK | Published08/04/2026 | SeverityHigh |
CVE-2026-10709FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK | Exploitation statusNot known exploited | FixYes | Affected productFBX SDK | Published08/04/2026 | SeverityHigh |
CVE-2026-17550DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published07/29/2026 | SeverityMedium |
CVE-2026-16465DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published07/29/2026 | SeverityMedium |
CVE-2026-16463DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published07/29/2026 | SeverityHigh |
CVE-2026-10789MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published06/22/2026 | SeverityCritical |
CVE-2026-1288RFA File Parsing Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published06/17/2026 | SeverityMedium |
CVE-2026-7454WRL File Parsing Memory Corruption in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published05/26/2026 | SeverityHigh |
CVE-2026-7453WRL File Parsing Memory Exhaustion in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published05/26/2026 | SeverityMedium |
CVE-2026-7452WRL File Parsing Memory Corruption in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published05/26/2026 | SeverityHigh |
CVE-2026-7451TIF File Parsing Out-of-Bounds Write in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published05/26/2026 | SeverityHigh |
CVE-2026-7450PAR File Parsing NULL Pointer Dereference in Autodesk 3ds Max | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published05/26/2026 | SeverityMedium |
CVE-2026-4344Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published04/14/2026 | SeverityHigh |
CVE-2026-4345Stored Cross-Site Scripting (XSS) Vulnerability in Design Name | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published04/14/2026 | SeverityHigh |
CVE-2026-4369Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published04/14/2026 | SeverityHigh |
CVE-2026-0875MODEL File Parsing Out-of-Bounds Write | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published02/18/2026 | SeverityHigh |
CVE-2026-0874CATPART File Parsing Out-of-Bounds Write | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published02/18/2026 | SeverityHigh |
CVE-2026-0536GIF File Parsing Stack Based Buffer Overflow | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published02/04/2026 | SeverityHigh |
CVE-2026-0662Untrusted Search Path Vulnerability when opening max Files | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published02/04/2026 | SeverityHigh |
CVE-2026-0660Stack Based Buffer Overflow in GIF File Parsing | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published02/04/2026 | SeverityHigh |
CVE-2026-0661Out-of-Bounds Write in RGB File Parsing | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published02/04/2026 | SeverityHigh |
CVE-2026-0537RGB File Parsing Memory Corruption | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published02/04/2026 | SeverityHigh |
CVE-2026-0538GIF File Parsing Out-of-Bounds Write | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published02/04/2026 | SeverityHigh |
CVE-2026-0659USD File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productUSD for Arnold | Published02/04/2026 | SeverityHigh |
CVE-2026-0535Stored XSS in Electronic Library Component Description | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published01/22/2026 | SeverityHigh |
CVE-2026-0534Stored XSS in the value of a part attribute | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published01/22/2026 | SeverityHigh |
CVE-2026-0533Stored XSS in Fusion desktop when attempting to delete a file | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published01/22/2026 | SeverityHigh |
CVE-2025-10900MODEL File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10899MODEL File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10898MODEL File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10889CATPART File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10888MODEL File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10887MODEL File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10886MODEL File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10884CATPART File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10883CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10882X_T File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-10881CATPRODUCT File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9460SLDPRT File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9459SLDPRT File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9457PRT File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9456SLDPRT File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9455CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9454PRT File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9453PRT File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-9452SLDPRT File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-14593CATPART File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published12/15/2025 | SeverityHigh |
CVE-2025-11797DWG File Parsing Use-After-Free Vulnerability | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published11/12/2025 | SeverityHigh |
CVE-2025-11795JPG File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published11/12/2025 | SeverityHigh |
CVE-2025-9458PRT File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published11/07/2025 | SeverityHigh |
CVE-2025-10885Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productInstaller | Published11/06/2025 | SeverityHigh |
CVE-2025-8354RFA File Parsing Type Confusion Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published09/23/2025 | SeverityHigh |
CVE-2025-10244HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productFusion | Published09/23/2025 | SeverityHigh |
CVE-2025-8892PRT File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published09/22/2025 | SeverityHigh |
CVE-2025-8894PDF File Parsing Heap-Based Buffer Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published09/16/2025 | SeverityHigh |
CVE-2025-8893PDF File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published09/16/2025 | SeverityHigh |
CVE-2025-5048DGN File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published08/15/2025 | SeverityHigh |
CVE-2025-5047DGN File Parsing Uninitialized Variable Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published08/15/2025 | SeverityHigh |
CVE-2025-5046DGN File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published08/15/2025 | SeverityHigh |
CVE-2025-6634TGA File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/06/2025 | SeverityHigh |
CVE-2025-6633RBG File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/06/2025 | SeverityHigh |
CVE-2025-6632PSD File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected product3ds Max | Published08/06/2025 | SeverityMedium |
CVE-2025-76753DM File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-7497PRT File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-6637PRT File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-6636PRT File Parsing Use-After-Free Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-6635PRT File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-6631PRT File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-50433DM File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-5038X_T File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productShared Components | Published07/29/2025 | SeverityHigh |
CVE-2025-5039Privilege Ecalation due to Untrusted Search Path Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published07/24/2025 | SeverityHigh |
CVE-2025-5042RFA File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published07/22/2025 | SeverityHigh |
CVE-2025-5040RTE File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published07/10/2025 | SeverityHigh |
CVE-2025-5037RFA File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published07/10/2025 | SeverityHigh |
CVE-2025-4605USD File Parsing Memory Allocation Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productUSD for Maya | Published06/11/2025 | SeverityMedium |
CVE-2025-5335Privilege Ecalation due to Untrusted Search Path Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productInstaller | Published06/10/2025 | SeverityHigh |
CVE-2025-5036RFA File Parsing Use-After-Free Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published06/02/2025 | SeverityHigh |
CVE-2025-1274RCS File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published04/15/2025 | SeverityHigh |
CVE-2025-1277PDF File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published04/15/2025 | SeverityHigh |
CVE-2025-1656PDF File Parsing Heap-based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published04/15/2025 | SeverityHigh |
CVE-2025-1273PDF File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published04/15/2025 | SeverityHigh |
CVE-2025-2497DWG File Parsing Stack-Based Buffer Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published04/15/2025 | SeverityHigh |
CVE-2025-1276DWG File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productAutoCAD | Published04/15/2025 | SeverityHigh |
CVE-2025-1275JPG File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productRevit | Published04/15/2025 | SeverityHigh |
CVE-2025-1660DWFX File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNavisworks Freedom | Published04/01/2025 | SeverityHigh |
CVE-2025-1659DWFX File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNavisworks Freedom | Published04/01/2025 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan