AU
Product
AutoCAD
182
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 170Medium 2Low 1
Watch
Add AutoCAD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25795 | 7.8 | Apr 13 | A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files Affected: before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2022-25792 | 7.8 | Apr 11 | A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2; 2022 before 2022.2.2 |
| CVE-2022-25791 | 7.8 | Apr 11 | A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2; 2022 before 2022.2.2 |
| CVE-2022-25790 | 7.8 | Apr 11 | A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2; 2022 before 2022.2.2 |
| CVE-2022-25789 | 7.8 | Apr 11 | A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2; 2022 before 2022.2.2 |
| CVE-2021-40159 | 7.8 | Jan 25 | An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through… Affected: 2022 before 2022.1.2 |
| CVE-2021-40158 | 7.8 | Jan 25 | A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file Affected: 2022 before 2022.1.2 |
| CVE-2021-40161 | 7.8 | Dec 23 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version Affected: before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2; after 2022 before 2022.2; 2020; +2 more |
| CVE-2021-40160 | 7.8 | Dec 23 | PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file Affected: 2022 before 2022.1.1; 2022 before 2022.2 |
| CVE-2021-27039 | 7.8 | Jul 9 | A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow Affected: before 2022.1.1 |
| CVE-2021-27043 | 7.8 | Jun 25 | An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths Affected: 2019 before 2019.1.3; 2020 before 2020.1.4; 2021 before 2021.1.1; 2022 before 2022.0.1 |
| CVE-2021-27042 | 7.8 | Jun 25 | A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files Affected: 2019 before 2019.1.3; 2020 before 2020.1.4; 2021 before 2021.1.1; 2022 before 2022.0.1 |
| CVE-2021-27041 | 7.8 | Jun 25 | A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files Affected: 2019 before 2019.1.3; 2020 before 2020.1.4; 2021 before 2021.1.1; 2022 before 2022.0.1 |
| CVE-2019-7364 | 7.8 | Aug 23 | DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD… Affected: 2017; 2018; 2019; 2020 |
| CVE-2019-7361 | 7.8 | Apr 9 | An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018,… Affected: 2018 |
| CVE-2019-7360 | 7.8 | Apr 9 | An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk… Affected: 2018 |
| CVE-2019-7359 | 7.8 | Apr 9 | An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk… Affected: 2018 |
| CVE-2019-7358 | 7.8 | Apr 9 | An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk… Affected: 2018 |
| CVE-2022-33884 | 7.5 | Oct 3 | Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2026-16465 | 7.1 | Jul 29 | DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD Affected: 2027.0.0 before 2027.1.0 |