Autodesk
Number 75 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
234
Critical
2
High
206
Known Exploited
0
Exploit available
0
Network, no login needed
3.6%
Of 222 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 47 | 1 | 36 | 10 | 0 | 0 |
| 2025 | 71 | 0 | 69 | 2 | 0 | 0 |
| 2024 | 102 | 0 | 100 | 2 | 0 | 0 |
| 2023 | 9 | 1 | 0 | 0 | 0 | 8 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 1 | 0 | 1 | 0 | 0 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 4 | 0 | 0 | 0 | 0 | 4 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| AutoCAD | 91 | 89 |
| Shared Components | 33 | 32 |
| Revit | 25 | 22 |
| Navisworks Freedom | 23 | 23 |
| 3ds Max | 21 | 16 |
| Fusion | 13 | 13 |
| AutoCAD, Advance Steel and Civil 3D | 6 | 1 |
| Installer | 5 | 4 |
| Autodesk Civil 3D | 2 | 0 |
| Customer Portal | 2 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 176 | 164 |
| Cross-Site Scripting | 10 | 10 |
| Stack-based Buffer Overflow | 8 | 8 |
| Use of Uninitialized Variable | 7 | 7 |
| Untrusted Search Path | 5 | 5 |
| Uncontrolled Recursion | 3 | 0 |
| Untrusted Pointer Dereference | 3 | 2 |
| Stack Overflow | 2 | 2 |
| Cleartext Transmission of Sensitive Information | 1 | 1 |
| Code Injection | 1 | 1 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-113775 | Dynamic Library Loading Process Control in Autodesk Fusion Desktop | High | 0.2% | |
| CVE-2026-107672 | Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility | High | 0.3% | |
| CVE-2026-102638 | Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop | High | 0.2% | |
| CVE-2026-102637 | Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop | High | 0.2% | |
| CVE-2026-102636 | Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop | High | 0.2% | |
| CVE-2026-15102 | Cleartext Transmission of Sensitive Information in ADP Desktop SDK | High | 0.1% | |
| CVE-2026-85217 | Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop | High | 0.2% | |
| CVE-2026-14255 | IFC File Parsing Uncontrolled Recursion in Certain Autodesk Products | Medium | 0.2% | |
| CVE-2026-7455 | FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max | High | 0.2% | |
| CVE-2026-19568 | SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max | High | 0.2% |