Vulnerabilidades en Autodesk

228 resultados
Análisis Vexday

Com 209 CVEs catalogadas e nenhuma registrada no CISA KEV, o perfil de exploração ativa da Autodesk está abaixo da média geral do catálogo, o que indica menor pressão imediata de ameaças em curso. O EPSS máximo observado é de 0,03, incluindo o da CVE-2021-27033, apontada como a mais perigosa no momento, sugerindo probabilidade reduzida de exploração a curto prazo para todo o portfólio. Ainda assim, a falha mais frequente é CWE-787 (escrita fora dos limites de memória), categoria historicamente associada a execução de código arbitrário e que merece atenção em ambientes onde produtos Autodesk processam arquivos de terceiros. As 10 CVEs surgidas nos últimos 90 dias e as 2 de severidade crítica devem ser priorizadas na avaliação de patches, mesmo sem evidência de exploração ativa confirmada.

CVE-2025-1428HIGHCATPRODUCT File Parsing Out-of-Bounds Read VulnerabilityEPSS 0.3%CVE-2025-1432HIGH3DM File Parsing Use-After-Free VulnerabilityEPSS 0.3%CVE-2025-10883HIGHCATPRODUCT File Parsing Out-of-Bounds Read VulnerabilityEPSS 0.3%CVE-2025-10881HIGHCATPRODUCT File Parsing Heap-Based Overflow VulnerabilityEPSS 0.3%CVE-2025-10886HIGHMODEL File Parsing Memory Corruption VulnerabilityEPSS 0.3%CVE-2025-10884HIGHCATPART File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.3%CVE-2025-10882HIGHX_T File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.3%CVE-2023-41139—A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnEPSS 0.3%CVE-2023-41140—A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicEPSS 0.3%CVE-2025-1277HIGHPDF File Parsing Memory Corruption VulnerabilityEPSS 0.3%CVE-2025-1656HIGHPDF File Parsing Heap-based Overflow VulnerabilityEPSS 0.3%CVE-2024-12192HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12191HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12193HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2024-12197HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.3%CVE-2025-10900HIGHMODEL File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.3%CVE-2023-29069—A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with maEPSS 0.3%CVE-2025-9460HIGHSLDPRT File Parsing Out-of-Bounds Read VulnerabilityEPSS 0.3%CVE-2025-10888HIGHMODEL File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.3%CVE-2025-10898HIGHMODEL File Parsing Out-of-Bounds Write VulnerabilityEPSS 0.3%