İçeriğe atla
Noroxi

Autodesk kayıtları

autodesk üreticisine ait 381 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
29
Düzeltme kaydı olan
%5,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

381 kayıt
  • CVE-2021-27030
    49Planlayın

    A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s

    YüksekCVSS 7,8İstismar yokEPSS %60

    autodesk · fbx review19 Nis 2021

  • CVE-2014-2967
    42Planlayın

    Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API c

    KritikCVSS 10,0İstismar yokEPSS %5

    autodesk · vred7 Tem 2014

  • CVE-2016-9303
    40Planlayın

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop cond

    KritikCVSS 9,8İstismar yokEPSS %4

    autodesk · fbx software development kit25 Oca 2017

  • CVE-2016-9307
    40Planlayın

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting mal

    KritikCVSS 9,8İstismar yokEPSS %2

    autodesk · fbx software development kit25 Oca 2017

  • CVE-2016-9306
    40Planlayın

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting mal

    KritikCVSS 9,8İstismar yokEPSS %2

    autodesk · fbx software development kit25 Oca 2017

  • CVE-2008-4472
    39İzleyin

    The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Des

    KritikCVSS 9,3Kavram kanıtıEPSS %8

    autodesk · design review7 Eki 2008

  • CVE-2008-4471
    39İzleyin

    Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Rev

    KritikCVSS 9,3Kavram kanıtıEPSS %7

    autodesk · design review7 Eki 2008

  • CVE-2014-3939
    39İzleyin

    Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitma

    KritikCVSS 9,3İstismar yokEPSS %6

    autodesk · sketchbook pro23 Tem 2014

  • CVE-2013-5365
    39İzleyin

    Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows r

    KritikCVSS 9,3İstismar yokEPSS %5

    autodesk · sketchbook2 Nis 2014

  • CVE-2009-3577
    39İzleyin

    Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a M

    KritikCVSS 9,3Kavram kanıtıEPSS %5

    autodesk · 3ds max24 Kas 2009

  • CVE-2016-9305
    39İzleyin

    Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting

    KritikCVSS 9,8İstismar yokEPSS %1

    autodesk · fbx software development kit25 Oca 2017

  • CVE-2023-29073
    39İzleyin

    A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow.

    KritikCVSS 9,8İstismar yokEPSS %1

    autodesk · autocad22 Kas 2023

  • CVE-2023-29075
    39İzleyin

    A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write.

    KritikCVSS 9,8İstismar yokEPSS %1

    autodesk · autocad23 Kas 2023

  • CVE-2023-29074
    39İzleyin

    A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write.

    KritikCVSS 9,8İstismar yokEPSS %1

    autodesk · autocad23 Kas 2023

  • CVE-2023-29076
    39İzleyin

    A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vu

    KritikCVSS 9,8İstismar yokEPSS %1

    autodesk · autocad23 Kas 2023

  • CVE-2022-33882
    39İzleyin

    Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation

    KritikCVSS 9,8İstismar yokEPSS %1

    autodesk · autodesk desktop3 Eki 2022

  • CVE-2009-3578
    38İzleyin

    Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1)

    KritikCVSS 9,3Kavram kanıtıEPSS %4

    autodesk · alias wavefront maya24 Kas 2009

  • CVE-2014-3938
    38İzleyin

    Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a

    KritikCVSS 9,3İstismar yokEPSS %4

    autodesk · sketchbook pro23 Tem 2014

  • CVE-2009-3576
    38İzleyin

    Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Sc

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    autodesk · autodesk softimage24 Kas 2009

  • CVE-2026-10789
    38İzleyin

    MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop

    KritikCVSS 9,6İstismar yokEPSS %1

    autodesk · fusion22 Haz 2026

  • CVE-2020-7082
    36İzleyin

    A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a system running it.

    YüksekCVSS 8,8İstismar yokEPSS %2

    autodesk · fbx software development kit17 Nis 2020

  • CVE-2016-9304
    36İzleyin

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting mal

    YüksekCVSS 8,8İstismar yokEPSS %2

    autodesk · fbx software development kit25 Oca 2017

  • CVE-2020-7081
    35İzleyin

    A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system runnin

    YüksekCVSS 8,8İstismar yokEPSS %1

    autodesk · fbx software development kit17 Nis 2020

  • CVE-2022-27864
    35İzleyin

    A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affec

    YüksekCVSS 8,8İstismar yokEPSS %1

    autodesk · design review29 Tem 2022

  • CVE-2025-10244
    34İzleyin

    HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability

    YüksekCVSS 8,7İstismar yokEPSS %0

    autodesk · fusion23 Eyl 2025