Lucene search
K

16763 matches found

Zero Day Initiative
Zero Day Initiative
•added 2025/12/19 12:0 a.m.•4 views

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SAS...

7.8CVSS7.5AI score0.00017EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/19 12:0 a.m.•5 views

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SAS...

7.8CVSS7.5AI score0.00017EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/19 12:0 a.m.•5 views

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SAS...

7.8CVSS7.5AI score0.00015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/19 12:0 a.m.•4 views

Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

7.8CVSS7.1AI score0.00015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convertconfig functio...

7.8CVSS7.4AI score0.00073EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convertconfig functio...

7.8CVSS7.4AI score0.00073EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•5 views

(0Day) Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convertconfig functio...

7.8CVSS7.4AI score0.00073EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.2AI score0.00027EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.00477EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•2 views

(0Day) NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.2AI score0.00027EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•2 views

(0Day) Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of pickle data. The issue results from the lack of proper validation...

10CVSS7.7AI score0.03089EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.3AI score0.00415EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•3 views

(0Day) Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.00234EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•2 views

(0Day) Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.00477EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.2AI score0.00027EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.00477EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•2 views

(0Day) NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.2AI score0.00027EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•3 views

(0Day) Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.3AI score0.00477EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•4 views

(0Day) NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.4AI score0.0003EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/18 12:0 a.m.•3 views

(0Day) Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Diffusers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.3AI score0.00415EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•4 views

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.2AI score0.00013EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•1 views

Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

7.8CVSS7.1AI score0.00028EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.00028EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Autodesk AutoCAD PRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

7.8CVSS7.1AI score0.00008EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•1 views

Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.00028EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Autodesk AutoCAD CATPRODUCT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.00028EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Autodesk AutoCAD PRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PR...

7.8CVSS7.1AI score0.00028EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•4 views

Autodesk AutoCAD SLDPRT File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.0001EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00041EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•6 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00023EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•2 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00023EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•4 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00023EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•2 views

AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00094EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00094EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•4 views

Microsoft Edge Mark-Of-The-Web Removal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS7.2AI score0.00052EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Junk...

7.3CVSS7.2AI score0.00111EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Siemens Simcenter Femap SLDPRT File Parsing Uninitialized Memory Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.1AI score0.00017EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Apple Safari JavaScriptCore FTL DataView byteLength Property Handling Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

8.8CVSS6.9AI score0.00086EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•5 views

Apple Safari JavaScriptCore HashTable Expansion Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS7AI score0.00068EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•2 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•2 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•4 views

Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00015EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The...

7.8CVSS7.2AI score0.001EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•2 views

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The...

7.8CVSS7.2AI score0.00066EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•5 views

Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP Content-Length header. The issue results from the...

7.5CVSS6.8AI score0.00878EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•2 views

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The...

7.8CVSS7.4AI score0.00096EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•2 views

GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XCF files. The...

7.8CVSS7.2AI score0.00072EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Autodesk AutoCAD X_T File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XT...

7.8CVSS7.1AI score0.00028EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/17 12:0 a.m.•3 views

Autodesk AutoCAD CATPRODUCT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.1AI score0.00028EPSS
Exploits0References1
Total number of security vulnerabilities16763