CVE-2021-46580

CVE-2021-46580 affects Bentley MicroStation CONNECT. The issue is a JT file parsing use-after-free caused by not validating an object’s existence before operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...