Vendor
Autodesk vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 66 vulnerabilities in Autodesk: 0 in the last 7 days and 12 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-113775, was published on 27 October 2026. 6 vulnerabilities in the last four weeks, up from none in the four before. 22 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 12
- Critical, all time
- 4
- Exploited in the wild
- 0
About Autodesk
A multinational software corporation that develops software for the architecture, engineering, construction, manufacturing, media, and entertainment industries.
Autodesk technologies
- Autodesk <UNKNOWN>45
- Autodesk 3ds Max37
- Autodesk Revit27
- Autodesk AutoCAD26
- Autodesk Advance Steel23
- Autodesk Autocad Architecture23
- Autodesk Autocad Electrical23
- Autodesk Autocad Map 3d23
- Autodesk Autocad Mechanical23
- Autodesk Autocad Mep23
- Autodesk Autocad Plant 3d23
- Autodesk Civil 3d23
- Autodesk Infraworks21
- Autodesk Inventor21
- Autodesk Revit Lt21
- Autodesk Shared Components21
- Autodesk Vault19
- Autodesk Fusion7
- Autodesk FBX SDK7
- Autodesk AutoCAD LT5
- Autodesk DWG TrueView5
- Autodesk Installer3
Latest Autodesk vulnerabilities
- CVE-2026-113775: Autodesk Fusion arbitrary code execution via LoadDllhighCVSS 7.8
- CVE-2026-102638: Autodesk Fusion stored cross-site scripting in Library ManagerhighCVSS 7.1
- CVE-2026-102637: Autodesk Fusion reflected XSS in protocol URL handlerhighCVSS 7.1
- CVE-2026-102636: Autodesk Fusion stored cross-site scripting in design namehighCVSS 7.1
- CVE-2026-107672: Autodesk Fusion Post Processor Utility markdown injection via crafted .stack.jsonhighCVSS 8.8
- CVE-2026-15102: Autodesk ADP Desktop SDK cleartext transmission of sensitive informationhighCVSS 7.5EPSS 0.1%
- CVE-2026-14255: Autodesk IFC parser uncontrolled recursion denial of servicemediumCVSS 5.5EPSS 0.1%
- CVE-2026-7455: Autodesk 3ds Max out-of-bounds write in FLT file parsinghighCVSS 7.8EPSS 0.2%
- CVE-2026-19568: Autodesk 3ds Max memory corruption in SVG parsinghighCVSS 7.8EPSS 0.1%
- CVE-2026-16783: Autodesk 3ds Max out-of-bounds write in ABC file parsinghighCVSS 7.8EPSS 0.1%
- CVE-2026-16782: Autodesk 3ds Max out-of-bounds read in SVG parsingmediumCVSS 5.3EPSS 0.2%
- CVE-2026-16781: Autodesk 3ds Max uncontrolled recursion in SVG parsingmediumCVSS 5.5EPSS 0.1%
- CVE-2026-14479: A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper…mediumCVSS 5.5EPSS 0.1%
- CVE-2026-14478: A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to…highCVSS 7.8EPSS 0.1%
- CVE-2026-8325: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A…highCVSS 7.8EPSS 0.2%
- CVE-2026-7406: A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer…highCVSS 7.8EPSS 0.2%
- CVE-2026-7405: A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…mediumCVSS 5.5EPSS 0.2%
- CVE-2026-1289: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A…highCVSS 7.8EPSS 0.2%
- CVE-2026-11803: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A…highCVSS 7.8EPSS 0.2%
- CVE-2026-10710: A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow…highCVSS 7.8EPSS 0.2%
- CVE-2026-10709: A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow…highCVSS 7.8EPSS 0.2%
- CVE-2026-17550: Autodesk AutoCAD out-of-bounds read in DWG and DXF parsingmediumCVSS 5.5
- CVE-2026-16465: Autodesk AutoCAD out-of-bounds read in DWG and DXF parsingmediumCVSS 6.1
- CVE-2026-16463: Autodesk AutoCAD heap overflow in DXF parsinghighCVSS 7.8
- CVE-2026-1288: Autodesk Revit NULL Pointer Dereference in Convert RFA to FormItmediumCVSS 5.5EPSS 0.1%
Most severe Autodesk vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2016-9307: Autodesk FBX SDK buffer overflows in 3DS file processingcriticalCVSS 9.8
- CVE-2016-9306: Autodesk FBX-SDK buffer overflows in DAE file parsingcriticalCVSS 9.8
- CVE-2016-9305: Autodesk FBX-SDK uninitialized pointer access in FBX parsingcriticalCVSS 9.8
- CVE-2016-9303: Autodesk FBX SDK buffer overflows in file parsingcriticalCVSS 9.8
- CVE-2026-107672: Autodesk Fusion Post Processor Utility markdown injection via crafted .stack.jsonhighCVSS 8.8
- CVE-2016-9304: Autodesk FBX-SDK buffer overflows in DXF parsinghighCVSS 8.8
- CVE-2026-0661: Autodesk 3ds Max memory corruption in RGB file parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0660: Autodesk 3ds Max stack buffer overflow in GIF parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0538: Autodesk 3ds Max out-of-bounds write in GIF parsinghighCVSS 8.4EPSS 0.0%
- CVE-2026-0537: Autodesk 3ds Max memory corruption in RGB file parsinghighCVSS 8.4EPSS 0.0%
Vulnerabilities per week
6 vulnerabilities in the last four weeks, up from none in the four before. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 5 | 0 | |
| 31 Aug 2026 | 1 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 1 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 5 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Autodesk vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/autodesk)<a href="https://junglewise.ai/threats/vendors/autodesk"><img src="https://junglewise.ai/threats/vendors/autodesk/badge.svg" alt="Autodesk vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/autodesk.json, and this page as text at https://junglewise.ai/threats/vendors/autodesk.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Autodesk vulnerabilities", https://junglewise.ai/threats/vendors/autodesk, 13 November 2026.