# Autodesk vulnerabilities Source: https://junglewise.ai/threats/vendors/autodesk Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/autodesk.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 66 vulnerabilities in Autodesk: 0 in the last 7 days and 12 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-113775, was published on 27 October 2026. 6 vulnerabilities in the last four weeks, up from none in the four before. 22 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 6 - Last 90 days: 12 - All time: 66 (4 critical, 0 exploited in the wild) ## About Autodesk A multinational software corporation that develops software for the architecture, engineering, construction, manufacturing, media, and entertainment industries. ## Latest Autodesk vulnerabilities - [CVE-2026-113775: Autodesk Fusion arbitrary code execution via LoadDll](https://junglewise.ai/threats/cve-2026-113775-a-maliciously-crafted-dynamic-library-when-loaded-from-an) (high, CVSS 7.8, published 27 Oct 2026) - [CVE-2026-102638: Autodesk Fusion stored cross-site scripting in Library Manager](https://junglewise.ai/threats/cve-2026-102638-a-maliciously-crafted-html-payload-in-the-description-of-an) (high, CVSS 7.1, published 27 Oct 2026) - [CVE-2026-102637: Autodesk Fusion reflected XSS in protocol URL handler](https://junglewise.ai/threats/cve-2026-102637-a-maliciously-crafted-html-payload-in-the-documentname-parameter) (high, CVSS 7.1, published 27 Oct 2026) - [CVE-2026-102636: Autodesk Fusion stored cross-site scripting in design name](https://junglewise.ai/threats/cve-2026-102636-a-maliciously-crafted-html-payload-in-a-design-name-when) (high, CVSS 7.1, published 27 Oct 2026) - [CVE-2026-107672: Autodesk Fusion Post Processor Utility markdown injection via crafted .stack.json](https://junglewise.ai/threats/cve-2026-107672-a-maliciously-crafted-stack-json-file-can-trigger-a-trusted) (high, CVSS 8.8, published 27 Oct 2026) - [CVE-2026-15102: Autodesk ADP Desktop SDK cleartext transmission of sensitive information](https://junglewise.ai/threats/cve-2026-15102-adp-desktop-sdk-contains-a-vulnerability-where-sensitive) (high, CVSS 7.5, published 14 Oct 2026) - [CVE-2026-14255: Autodesk IFC parser uncontrolled recursion denial of service](https://junglewise.ai/threats/cve-2026-14255-autodesk-ifc-parser-uncontrolled-recursion-denial-of-service) (medium, CVSS 5.5, published 2 Sep 2026) - [CVE-2026-7455: Autodesk 3ds Max out-of-bounds write in FLT file parsing](https://junglewise.ai/threats/cve-2026-7455-autodesk-3ds-max-out-of-bounds-write-in-flt-file-parsing) (high, CVSS 7.8, published 24 Aug 2026) - [CVE-2026-19568: Autodesk 3ds Max memory corruption in SVG parsing](https://junglewise.ai/threats/cve-2026-19568-autodesk-3ds-max-memory-corruption-in-svg-parsing) (high, CVSS 7.8, published 24 Aug 2026) - [CVE-2026-16783: Autodesk 3ds Max out-of-bounds write in ABC file parsing](https://junglewise.ai/threats/cve-2026-16783-autodesk-3ds-max-out-of-bounds-write-in-abc-file-parsing) (high, CVSS 7.8, published 24 Aug 2026) - [CVE-2026-16782: Autodesk 3ds Max out-of-bounds read in SVG parsing](https://junglewise.ai/threats/cve-2026-16782-autodesk-3ds-max-out-of-bounds-read-in-svg-parsing) (medium, CVSS 5.3, published 24 Aug 2026) - [CVE-2026-16781: Autodesk 3ds Max uncontrolled recursion in SVG parsing](https://junglewise.ai/threats/cve-2026-16781-autodesk-3ds-max-uncontrolled-recursion-in-svg-parsing) (medium, CVSS 5.5, published 24 Aug 2026) - [CVE-2026-14479: A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper…](https://junglewise.ai/threats/cve-2026-14479-a-maliciously-crafted-input-when-processed-by-the-autodesk) (medium, CVSS 5.5, published 12 Aug 2026) - [CVE-2026-14478: A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to…](https://junglewise.ai/threats/cve-2026-14478-a-maliciously-created-executable-when-executed-on-the-victim-s) (high, CVSS 7.8, published 12 Aug 2026) - [CVE-2026-8325: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A…](https://junglewise.ai/threats/cve-2026-8325-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit) (high, CVSS 7.8, published 6 Aug 2026) - [CVE-2026-7406: A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer…](https://junglewise.ai/threats/cve-2026-7406-a-maliciously-crafted-bmp-file-when-parsed-through-certain) (high, CVSS 7.8, published 6 Aug 2026) - [CVE-2026-7405: A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…](https://junglewise.ai/threats/cve-2026-7405-a-maliciously-crafted-tif-file-when-parsed-through-certain) (medium, CVSS 5.5, published 6 Aug 2026) - [CVE-2026-1289: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A…](https://junglewise.ai/threats/cve-2026-1289-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit) (high, CVSS 7.8, published 6 Aug 2026) - [CVE-2026-11803: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A…](https://junglewise.ai/threats/cve-2026-11803-a-maliciously-crafted-pdf-file-when-parsed-through-autodesk-revit) (high, CVSS 7.8, published 6 Aug 2026) - [CVE-2026-10710: A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow…](https://junglewise.ai/threats/cve-2026-10710-a-maliciously-crafted-fbx-file-when-parsed-through-autodesk-fbx) (high, CVSS 7.8, published 4 Aug 2026) - [CVE-2026-10709: A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow…](https://junglewise.ai/threats/cve-2026-10709-a-maliciously-crafted-fbx-file-when-parsed-through-autodesk-fbx) (high, CVSS 7.8, published 4 Aug 2026) - [CVE-2026-17550: Autodesk AutoCAD out-of-bounds read in DWG and DXF parsing](https://junglewise.ai/threats/cve-2026-17550-autodesk-autocad-out-of-bounds-read-in-dwg-and-dxf-parsing) (medium, CVSS 5.5, published 29 Jul 2026) - [CVE-2026-16465: Autodesk AutoCAD out-of-bounds read in DWG and DXF parsing](https://junglewise.ai/threats/cve-2026-16465-autodesk-autocad-out-of-bounds-read-in-dwg-and-dxf-parsing) (medium, CVSS 6.1, published 29 Jul 2026) - [CVE-2026-16463: Autodesk AutoCAD heap overflow in DXF parsing](https://junglewise.ai/threats/cve-2026-16463-autodesk-autocad-heap-overflow-in-dxf-parsing) (high, CVSS 7.8, published 29 Jul 2026) - [CVE-2026-1288: Autodesk Revit NULL Pointer Dereference in Convert RFA to FormIt](https://junglewise.ai/threats/cve-2026-1288-autodesk-revit-null-pointer-dereference-in-convert-rfa-to-formit) (medium, CVSS 5.5, published 17 Jun 2026) ## Most severe Autodesk vulnerabilities - [CVE-2016-9307: Autodesk FBX SDK buffer overflows in 3DS file processing](https://junglewise.ai/threats/cve-2016-9307-autodesk-fbx-sdk-buffer-overflows-in-3ds-file-processing) (critical, CVSS 9.8, published 25 Jan 2017) - [CVE-2016-9306: Autodesk FBX-SDK buffer overflows in DAE file parsing](https://junglewise.ai/threats/cve-2016-9306-autodesk-fbx-sdk-buffer-overflows-in-dae-file-parsing) (critical, CVSS 9.8, published 25 Jan 2017) - [CVE-2016-9305: Autodesk FBX-SDK uninitialized pointer access in FBX parsing](https://junglewise.ai/threats/cve-2016-9305-autodesk-fbx-sdk-uninitialized-pointer-access-in-fbx-parsing) (critical, CVSS 9.8, published 25 Jan 2017) - [CVE-2016-9303: Autodesk FBX SDK buffer overflows in file parsing](https://junglewise.ai/threats/cve-2016-9303-autodesk-fbx-sdk-buffer-overflows-in-file-parsing) (critical, CVSS 9.8, published 25 Jan 2017) - [CVE-2026-107672: Autodesk Fusion Post Processor Utility markdown injection via crafted .stack.json](https://junglewise.ai/threats/cve-2026-107672-a-maliciously-crafted-stack-json-file-can-trigger-a-trusted) (high, CVSS 8.8, published 27 Oct 2026) - [CVE-2016-9304: Autodesk FBX-SDK buffer overflows in DXF parsing](https://junglewise.ai/threats/cve-2016-9304-autodesk-fbx-sdk-buffer-overflows-in-dxf-parsing) (high, CVSS 8.8, published 25 Jan 2017) - [CVE-2026-0661: Autodesk 3ds Max memory corruption in RGB file parsing](https://junglewise.ai/threats/cve-2026-0661-autodesk-3ds-max-memory-corruption-in-rgb-file-parsing) (high, CVSS 8.4, published 4 Feb 2026) - [CVE-2026-0660: Autodesk 3ds Max stack buffer overflow in GIF parsing](https://junglewise.ai/threats/cve-2026-0660-autodesk-3ds-max-stack-buffer-overflow-in-gif-parsing) (high, CVSS 8.4, published 4 Feb 2026) - [CVE-2026-0538: Autodesk 3ds Max out-of-bounds write in GIF parsing](https://junglewise.ai/threats/cve-2026-0538-autodesk-3ds-max-out-of-bounds-write-in-gif-parsing) (high, CVSS 8.4, published 4 Feb 2026) - [CVE-2026-0537: Autodesk 3ds Max memory corruption in RGB file parsing](https://junglewise.ai/threats/cve-2026-0537-autodesk-3ds-max-memory-corruption-in-rgb-file-parsing) (high, CVSS 8.4, published 4 Feb 2026) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 5 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 5 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Autodesk technologies - [Autodesk ](https://junglewise.ai/threats/technologies/unknown): 45 vulnerabilities - [Autodesk 3ds Max](https://junglewise.ai/threats/technologies/3ds-max): 37 vulnerabilities - [Autodesk Revit](https://junglewise.ai/threats/technologies/revit): 27 vulnerabilities - [Autodesk AutoCAD](https://junglewise.ai/threats/technologies/autocad): 26 vulnerabilities - [Autodesk Advance Steel](https://junglewise.ai/threats/technologies/advance-steel): 23 vulnerabilities - [Autodesk Autocad Architecture](https://junglewise.ai/threats/technologies/autocad-architecture): 23 vulnerabilities - [Autodesk Autocad Electrical](https://junglewise.ai/threats/technologies/autocad-electrical): 23 vulnerabilities - [Autodesk Autocad Map 3d](https://junglewise.ai/threats/technologies/autocad-map-3d): 23 vulnerabilities - [Autodesk Autocad Mechanical](https://junglewise.ai/threats/technologies/autocad-mechanical): 23 vulnerabilities - [Autodesk Autocad Mep](https://junglewise.ai/threats/technologies/autocad-mep): 23 vulnerabilities - [Autodesk Autocad Plant 3d](https://junglewise.ai/threats/technologies/autocad-plant-3d): 23 vulnerabilities - [Autodesk Civil 3d](https://junglewise.ai/threats/technologies/civil-3d): 23 vulnerabilities - [Autodesk Infraworks](https://junglewise.ai/threats/technologies/infraworks): 21 vulnerabilities - [Autodesk Inventor](https://junglewise.ai/threats/technologies/inventor): 21 vulnerabilities - [Autodesk Revit Lt](https://junglewise.ai/threats/technologies/revit-lt): 21 vulnerabilities - [Autodesk Shared Components](https://junglewise.ai/threats/technologies/shared-components): 21 vulnerabilities - [Autodesk Vault](https://junglewise.ai/threats/technologies/autodesk-vault): 19 vulnerabilities - [Autodesk Fusion](https://junglewise.ai/threats/technologies/autodesk-fusion): 7 vulnerabilities - [Autodesk FBX SDK](https://junglewise.ai/threats/technologies/fbx-software-development-kit): 7 vulnerabilities - [Autodesk AutoCAD LT](https://junglewise.ai/threats/technologies/autocad-lt): 5 vulnerabilities - [Autodesk DWG TrueView](https://junglewise.ai/threats/technologies/dwg-trueview): 5 vulnerabilities - [Autodesk Installer](https://junglewise.ai/threats/technologies/installer): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Autodesk vulnerabilities", https://junglewise.ai/threats/vendors/autodesk, 13 November 2026.