FU
Product
Fusion
18
CVEs
0
On KEV
9.6
Max CVSS
4
New 30D
Severity mix
Critical 1High 17Medium 0Low 0
Watch
Add Fusion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10789 | 9.6 | Jun 22 | MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop Affected: 2703.1.11 before 2703.1.20 |
| CVE-2025-10244 | 8.7 | Sep 23 | A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting (XSS) vulnerability Affected: 2602.1.25 before 2604.1.25 |
| CVE-2026-85217 | 8.6 | Sep 10 | Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop Affected: 2705.0.0 before 2705.1.11 |
| CVE-2026-0535 | 8.1 | Jan 22 | A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion… Affected: before 2606.1.21 |
| CVE-2026-0534 | 8.1 | Jan 22 | A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion… Affected: before 2606.1.21 |
| CVE-2026-0533 | 8.1 | Jan 22 | A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS)… Affected: before 2606.1.21 |
| CVE-2026-113775 New | 7.8 | Oct 27 | Dynamic Library Loading Process Control in Autodesk Fusion Desktop Affected: 2705.1.30 before 2706.1.14 |
| CVE-2021-40162 | 7.8 | Oct 7 | A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or… Affected: 2.0.10356 before 2.0.11405 |
| CVE-2021-40163 | 7.8 | Oct 7 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component Affected: 2.0.10356 before 2.0.11405 |
| CVE-2021-40164 | 7.8 | Oct 7 | A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files Affected: 2.0.10356 before 2.0.11405 |
| CVE-2021-40165 | 7.8 | Oct 7 | A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC… Affected: 2.0.10356 before 2.0.11405 |
| CVE-2021-40166 | 7.8 | Oct 7 | A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them Affected: 2.0.10356 before 2.0.11405 |
| CVE-2026-102638 New | 7.1 | Oct 27 | Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop Affected: 2705.1.30 before 2706.1.14 |
| CVE-2026-102637 New | 7.1 | Oct 27 | Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop Affected: 2705.1.30 before 2706.1.14 |
| CVE-2026-102636 New | 7.1 | Oct 27 | Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop Affected: 2705.1.30 before 2706.1.14 |
| CVE-2026-4344 | 7.1 | Apr 14 | Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name Affected: 2606.0 before 2702.1.47 |
| CVE-2026-4345 | 7.1 | Apr 14 | Stored Cross-Site Scripting (XSS) Vulnerability in Design Name Affected: 2606.0 before 2702.1.47 |
| CVE-2026-4369 | 7.1 | Apr 14 | Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name Affected: 2606.0 before 2702.1.47 |
Showing 18