PatchTheCVEnavisworks vulnerabilities and fixes
Recent CVEs affecting navisworks, with upgrade or downgrade steps. 23 tracked.
navisworks has 23 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 17. Most recent: 2025-04-01. Highest priority: CVE-2024-11422 (score 35/100).
- CVE-2025-1660 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulner
- CVE-2025-1659 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vuln
- CVE-2025-1658 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vuln
- CVE-2024-7675 HIGH 7.8 DOWNGRADE A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Fr
- CVE-2024-7674 HIGH 7.8 DOWNGRADE A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-base
- CVE-2024-7673 HIGH 7.8 DOWNGRADE A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based
- CVE-2024-7672 HIGH 7.8 DOWNGRADE A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an
- CVE-2024-7671 HIGH 7.8 DOWNGRADE A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-B
- CVE-2024-7670 HIGH 7.8 DOWNGRADE A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bou
- CVE-2024-12671 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vul
- CVE-2024-12670 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Ov
- CVE-2024-12669 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Ov
- CVE-2024-12200 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vul
- CVE-2024-12199 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vul
- CVE-2024-12198 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vul
- CVE-2024-12197 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vul
- CVE-2024-12194 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulner
- CVE-2024-12193 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vul
- CVE-2024-12192 HIGH 7.8 UPGRADE A maliciously crafted DWF file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vuln
- CVE-2024-12191 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vul
- CVE-2024-12179 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Ov
- CVE-2024-12178 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulner
- CVE-2024-11422 HIGH 7.8 UPGRADE A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vul
FAQ
How do I fix navisworks vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is navisworks being exploited right now?
None of the tracked navisworks CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which navisworks CVE should I patch first?
CVE-2024-11422 currently ranks highest (35/100): A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vul.