CVE-2026-113775: falha de alta gravidade em Autodesk Fusion
Dynamic Library Loading Process Control in Autodesk Fusion Desktop
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.2%
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Autodesk · FusionCVEs relacionadas — Autodesk Fusion
No mesmo produto, das mais perigosas para as menos.
CVE-2026-10789CRITICALMCP Extension Code Injection Vulnerability in Autodesk Fusion DesktopEPSS 0.7%CVE-2026-0533HIGHStored XSS in Fusion desktop when attempting to delete a fileEPSS 0.7%CVE-2026-0535HIGHStored XSS in Electronic Library Component DescriptionEPSS 0.7%CVE-2026-0534HIGHStored XSS in the value of a part attributeEPSS 0.5%CVE-2025-10244HIGHHTML Payload Stored Cross-Site Scripting (XSS) VulnerabilityEPSS 0.4%CVE-2026-4344HIGHStored Cross-Site Scripting (XSS) Vulnerability in Assembly Component NameEPSS 0.2%