CVE-2025-10244

CVE-2025-10244 affects Autodesk Fusion desktop app via a Stored Cross-site Scripting (XSS) condition triggered by a malicious HTML payload rendered by the application. The vulnerability can allow reading local files or executing arbitrary code in the context of the current process. Reported CVSSv...

CVE-2025-10244 HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...

Autodesk Fusion 安全漏洞

Autodesk Fusion is a data management software platform from the US-based Autodesk, Inc. A security vulnerability exists in Autodesk Fusion that stems from a stored cross-site scripting vulnerability in the handling of specially crafted HTML payloads, which could result in reading a local file or...

CVE-2025-8354: Access of Resource Using Incompatible Type

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-10244: Improper Neutralization of Input During Web Page Generation

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...

PT-2025-39164

Name of the Vulnerable Software and Affected Versions Autodesk Fusion desktop app affected versions not specified Description A specially crafted HTML payload, when processed by the application, can lead to a Stored Cross-site Scripting XSS condition. Successful exploitation may allow a malicious...

Autodesk Revit RFA File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

CVE-2025-8892

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-8892

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-8892 PRT File Parsing Memory Corruption Vulnerability

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-8892 PRT File Parsing Memory Corruption Vulnerability

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-8892

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-8892

CVE-2025-8892 relates to Autodesk products, notably AutoCAD, where parsing a specially crafted PRT file can trigger a memory corruption vulnerability. The underlying issue is in the PRT file handling of certain Autodesk components, allowing a malicious actor to execute arbitrary code in the conte...

PT-2025-39068

Name of the Vulnerable Software and Affected Versions Autodesk products affected versions not specified Description A specially crafted PRT file, when processed by certain Autodesk products, can lead to a memory corruption issue. A malicious actor could potentially exploit this to execute arbitra...

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from a memory corruption when parsing a specially crafted PRT file, which could lead to the execution of arbitrary code in the current process environment...

CVE-2025-8892: Buffer Copy without Checking Size of Input

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

The vulnerability of Autodesk Revit’s BIM software lies in buffer overflows in dynamic memory, which allows attackers to cause system failures, gain unauthorized access to protected information, and execute arbitrary code.

The vulnerability of BIM software from Autodesk Revit is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures, gain unauthorized access to protected information, and execute arbitrary code...

CVE-2025-8894

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-8893

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-8894

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...