Read the docs

Autodesk

Records390All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high346CVSS 7.0–8.9

Exploited now

Autodesk records in CISA KEV

No Autodesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

47 records in Navisworks · all components

TI-2023-13518 CVE-2023-29068 · GHSA-fw27-7fvf-jgxv

Out-of-bounds write in Autodesk products

Priority LOW 36

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-787
TI-2023-10477 CVE-2023-25004 · GHSA-2w8c-hj6v-28vw

Integer overflow in Autodesk products

Priority LOW 36

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-190
TI-2023-10476 CVE-2023-25003 · GHSA-gf4x-x9q7-jgg2

Out-of-bounds read in AutoCAD, Maya

Priority LOW 36

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00251 Published 2023-06-23 No fix listed CWE-125
TI-2023-10475 CVE-2023-25002 · GHSA-p642-fwhv-jwmj

Use after free in Multiple

Priority LOW 36

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00349 Published 2023-06-27 No fix listed CWE-416
TI-2023-10474 CVE-2023-25001 · GHSA-6q6r-9q5h-h93m

Use after free in Navisworks

Priority LOW 36

A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2023-06-27 No fix listed CWE-416
Priority LOW 36

A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00803 Published 2022-06-21 No fix listed CWE-755
TI-2022-10534 CVE-2022-27528 · GHSA-9cmx-hpfh-2x7m

Use after free in Autodesk Navisworks

Priority LOW 36

A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01169 Published 2022-04-11 No fix listed CWE-416
Load more
Open these records in search →