psirt@autodesk.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS psirt@autodesk.com
03
assessed vulnerabilities (221)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-113775US | high7.8 | — | ||
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Danger… | ||||
| CVE-2026-102638US | high7.1 | — | ||
A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported, can trigger a Store… | ||||
| CVE-2026-102637US | high7.1 | — | ||
A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting… | ||||
| CVE-2026-102636US | high7.1 | — | ||
A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS) vulnerability i… | ||||
| CVE-2026-107672US | high8.8 | — | ||
A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit thi… | ||||
| CVE-2026-15102US | high7.5OT elevated | — | ||
ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk se… | ||||
| CVE-2026-85217US | high8.6 | — | ||
A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successfu… | ||||
| CVE-2026-14255US | medium5.5 | — | ||
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerabilit… | ||||
| CVE-2026-7455US | high7.8 | — | ||
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a c… | ||||
| CVE-2026-19568US | high7.8 | — | ||
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi… | ||||
| CVE-2026-16783US | high7.8 | — | ||
A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a c… | ||||
| CVE-2026-16782US | high7.8 | — | ||
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cr… | ||||
| CVE-2026-16781US | medium5.5 | — | ||
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can trigger an Uncontrolled Recursion vulnerability. A malicious actor may leverage this vulnerability to caus… | ||||
| CVE-2026-14479US | — | — | ||
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an ou… | ||||
| CVE-2026-14478US | — | — | ||
A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify p… | ||||
| CVE-2026-8325US | — | — | ||
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a cra… | ||||
| CVE-2026-7406US | — | — | ||
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerab… | ||||
| CVE-2026-7405US | — | — | ||
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor… | ||||
| CVE-2026-1289US | — | — | ||
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, di… | ||||
| CVE-2026-11803US | — | — | ||
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a cras… | ||||