EUVD-2026-65153

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

EUVD-2026-65152

A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

EUVD-2026-65151

A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

EUVD-2026-65150

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

EUVD-2026-65149

A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to cause the application to terminate unexpectedly, resulting in a denial-of-service...

CVE-2026-17550

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:10+00:00| seen| https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-autodesk-autocad...

CVE-2026-16465

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:08+00:00| seen| https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-autodesk-autocad...

CVE-2026-16463

creationtimestamp| type| source ---|---|--- 2026-08-13 20:15:05+00:00| seen| https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-autodesk-autocad...

Autodesk Revit 2026 < 2026.5 / 2027 < 2027.2 Multiple Vulnerabilities (adsk-sa-2026-0011)

The version of Autodesk Revit installed on the remote host is 2026 prior to 2026.5 or 2027 prior to 2027.2. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can...

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

EUVD-2026-57239

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

PT-2026-71097

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITYSYSTEM...

CVE-2026-7405

creationtimestamp| type| source ---|---|--- 2026-08-07 12:45:12+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-autodesk-11...

CVE-2026-1289

creationtimestamp| type| source ---|---|--- 2026-08-07 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-autodesk-11...

CVE-2026-8325

creationtimestamp| type| source ---|---|--- 2026-08-07 12:45:02+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-autodesk-11...

EUVD-2026-54295

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...