Vulnerabilidades em Autodesk

214 resultados
Análise Vexday

Com 209 CVEs catalogadas e nenhuma registrada no CISA KEV, o perfil de exploração ativa da Autodesk está abaixo da média geral do catálogo, o que indica menor pressão imediata de ameaças em curso. O EPSS máximo observado é de 0,03, incluindo o da CVE-2021-27033, apontada como a mais perigosa no momento, sugerindo probabilidade reduzida de exploração a curto prazo para todo o portfólio. Ainda assim, a falha mais frequente é CWE-787 (escrita fora dos limites de memória), categoria historicamente associada a execução de código arbitrário e que merece atenção em ambientes onde produtos Autodesk processam arquivos de terceiros. As 10 CVEs surgidas nos últimos 90 dias e as 2 de severidade crítica devem ser priorizadas na avaliação de patches, mesmo sem evidência de exploração ativa confirmada.

CVE-2021-27033HIGHDouble Free File Parsing Vulnerability in Autodesk Design ReviewEPSS 3.0%CVE-2019-7360—An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, AutodeskEPSS 1.6%CVE-2019-7358—An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk EPSS 1.6%CVE-2019-7359—An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, AutodeskEPSS 1.6%CVE-2019-7361—An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code executionEPSS 1.4%CVE-2023-29073—A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malEPSS 1.0%CVE-2023-29074—A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicioEPSS 1.0%CVE-2023-29075CRITICALA maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious aEPSS 1.0%CVE-2024-23137HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 1.0%CVE-2023-29076—A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vuEPSS 1.0%CVE-2026-10789CRITICALMCP Extension Code Injection Vulnerability in Autodesk Fusion DesktopEPSS 0.7%CVE-2024-23122HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.7%CVE-2024-23123HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23121HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23132HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2026-0533HIGHStored XSS in Fusion desktop when attempting to delete a fileEPSS 0.6%CVE-2026-0535HIGHStored XSS in Electronic Library Component DescriptionEPSS 0.6%CVE-2024-23124HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23130HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.5%CVE-2024-23131HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.5%