Vulnerabilidades em Autodesk

234 resultados
Análise Vexday

Com 209 CVEs catalogadas e nenhuma registrada no CISA KEV, o perfil de exploração ativa da Autodesk está abaixo da média geral do catálogo, o que indica menor pressão imediata de ameaças em curso. O EPSS máximo observado é de 0,03, incluindo o da CVE-2021-27033, apontada como a mais perigosa no momento, sugerindo probabilidade reduzida de exploração a curto prazo para todo o portfólio. Ainda assim, a falha mais frequente é CWE-787 (escrita fora dos limites de memória), categoria historicamente associada a execução de código arbitrário e que merece atenção em ambientes onde produtos Autodesk processam arquivos de terceiros. As 10 CVEs surgidas nos últimos 90 dias e as 2 de severidade crítica devem ser priorizadas na avaliação de patches, mesmo sem evidência de exploração ativa confirmada.

CVE-2024-8598HIGHAutodesk AutoCAD ACTranslators STEP File Parsing Memory Corruption Code Execution VulnerabilityEPSS 0.2%CVE-2024-9996HIGHAutodesk AutoCAD DWG File Parsing Out-Of-Bounds Write Code Execution VulnerabilityEPSS 0.2%CVE-2024-8589HIGHAutodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read VulnerabilityEPSS 0.2%CVE-2024-8596HIGHAutodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Code Execution VulnerabilityEPSS 0.2%CVE-2024-8588HIGHAutodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read VulnerabilityEPSS 0.2%CVE-2024-8600HIGHA maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A maliEPSS 0.2%CVE-2024-7672HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.2%CVE-2024-7670HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.2%CVE-2025-6632MEDIUMPSD File Parsing Out-of-Bounds Read VulnerabilityEPSS 0.2%CVE-2025-5039HIGHPrivilege Ecalation due to Untrusted Search Path VulnerabilityEPSS 0.2%CVE-2025-5036HIGHRFA File Parsing Use-After-Free VulnerabilityEPSS 0.2%CVE-2026-4345HIGHStored Cross-Site Scripting (XSS) Vulnerability in Design NameEPSS 0.2%CVE-2026-0662HIGHUntrusted Search Path Vulnerability when opening max FilesEPSS 0.2%CVE-2026-4344HIGHStored Cross-Site Scripting (XSS) Vulnerability in Assembly Component NameEPSS 0.2%CVE-2024-7671HIGHDWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop SoftwareEPSS 0.2%CVE-2024-8896HIGHAutodesk AutoCAD DXF File Parsing Unitialized Variable Code Execution VulnerabilityEPSS 0.2%CVE-2026-4369HIGHStored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant NameEPSS 0.2%CVE-2024-7995HIGHAutodesk VRED Design Privilege Escalation VulnerabilityEPSS 0.2%CVE-2025-5040HIGHRTE File Parsing Heap-Based Overflow VulnerabilityEPSS 0.2%CVE-2025-4605MEDIUMUSD File Parsing Memory Allocation VulnerabilityEPSS 0.2%