Skip to content
Noroxi

Autodesk records

381 published records for vendor autodesk.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
29
With a fix record
5.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

381 records
  • CVE-2021-27030
    49Plan

    A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s

    HighCVSS 7.8No exploitEPSS 59%

    autodesk · fbx reviewApr 19, 2021

  • CVE-2014-2967
    42Plan

    Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API c

    CriticalCVSS 10.0No exploitEPSS 5%

    autodesk · vredJul 7, 2014

  • CVE-2016-9303
    40Plan

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code or cause an infinite loop cond

    CriticalCVSS 9.8No exploitEPSS 4%

    autodesk · fbx software development kitJan 25, 2017

  • CVE-2016-9307
    40Plan

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting mal

    CriticalCVSS 9.8No exploitEPSS 2%

    autodesk · fbx software development kitJan 25, 2017

  • CVE-2016-9306
    40Plan

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting mal

    CriticalCVSS 9.8No exploitEPSS 2%

    autodesk · fbx software development kitJan 25, 2017

  • CVE-2008-4472
    39Monitor

    The UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in Revit Architecture 2009 SP2 and Autodesk Des

    CriticalCVSS 9.3Proof of conceptEPSS 7%

    autodesk · design reviewOct 7, 2008

  • CVE-2008-4471
    39Monitor

    Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control (AdView.dll 9.0.0.96), as used in Rev

    CriticalCVSS 9.3Proof of conceptEPSS 6%

    autodesk · design reviewOct 7, 2008

  • CVE-2014-3939
    39Monitor

    Heap-based buffer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer bitma

    CriticalCVSS 9.3No exploitEPSS 5%

    autodesk · sketchbook proJul 23, 2014

  • CVE-2013-5365
    39Monitor

    Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows r

    CriticalCVSS 9.3No exploitEPSS 5%

    autodesk · sketchbookApr 2, 2014

  • CVE-2009-3577
    39Monitor

    Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a M

    CriticalCVSS 9.3Proof of conceptEPSS 5%

    autodesk · 3ds maxNov 24, 2009

  • CVE-2016-9305
    39Monitor

    Improper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted objects related to reading and converting

    CriticalCVSS 9.8No exploitEPSS 1%

    autodesk · fbx software development kitJan 25, 2017

  • CVE-2023-29073
    39Monitor

    A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow.

    CriticalCVSS 9.8No exploitEPSS 1%

    autodesk · autocadNov 22, 2023

  • CVE-2023-29075
    39Monitor

    A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write.

    CriticalCVSS 9.8No exploitEPSS 1%

    autodesk · autocadNov 23, 2023

  • CVE-2023-29074
    39Monitor

    A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write.

    CriticalCVSS 9.8No exploitEPSS 1%

    autodesk · autocadNov 23, 2023

  • CVE-2023-29076
    39Monitor

    A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vu

    CriticalCVSS 9.8No exploitEPSS 1%

    autodesk · autocadNov 23, 2023

  • CVE-2022-33882
    39Monitor

    Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation

    CriticalCVSS 9.8No exploitEPSS 1%

    autodesk · autodesk desktopOct 3, 2022

  • CVE-2009-3578
    38Monitor

    Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1)

    CriticalCVSS 9.3Proof of conceptEPSS 4%

    autodesk · alias wavefront mayaNov 24, 2009

  • CVE-2014-3938
    38Monitor

    Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a

    CriticalCVSS 9.3No exploitEPSS 4%

    autodesk · sketchbook proJul 23, 2014

  • CVE-2009-3576
    38Monitor

    Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Sc

    CriticalCVSS 9.3Proof of conceptEPSS 3%

    autodesk · autodesk softimageNov 24, 2009

  • CVE-2026-10789
    38Monitor

    MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop

    CriticalCVSS 9.6No exploitEPSS 0%

    autodesk · fusionJun 22, 2026

  • CVE-2020-7082
    36Monitor

    A use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to code execution on a system running it.

    HighCVSS 8.8No exploitEPSS 2%

    autodesk · fbx software development kitApr 17, 2020

  • CVE-2016-9304
    36Monitor

    Multiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute arbitrary code when reading or converting mal

    HighCVSS 8.8No exploitEPSS 1%

    autodesk · fbx software development kitJan 25, 2017

  • CVE-2020-7081
    35Monitor

    A type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to arbitary code read/write on the system runnin

    HighCVSS 8.8No exploitEPSS 1%

    autodesk · fbx software development kitApr 17, 2020

  • CVE-2022-27864
    35Monitor

    A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affec

    HighCVSS 8.8No exploitEPSS 1%

    autodesk · design reviewJul 29, 2022

  • CVE-2025-10244
    34Monitor

    HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability

    HighCVSS 8.7No exploitEPSS 0%

    autodesk · fusionSep 23, 2025