Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46575

CVE-2021-46575 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing-use-after-free flaw in DGN file handling where the code does not validate object existence before operations, enabling remote code execution in the process context. Exploitation requires user interaction (visit...