PatchTheCVEautodesk vulnerabilities
Recent CVEs affecting autodesk products. 9 tracked.
autodesk has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-08-12. Highest priority: CVE-2026-10709 (score 30/100).
- CVE-2026-10709 HIGH 7.8 UPGRADE A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflo
- CVE-2026-10710 HIGH 7.8 UPGRADE A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflo
- CVE-2026-11803 HIGH 7.8 UPGRADE A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerabil
- CVE-2026-1289 HIGH 7.8 UPGRADE A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability
- CVE-2026-7406 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer D
- CVE-2026-8325 HIGH 7.8 UPGRADE A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerabi
- CVE-2026-7405 MEDIUM 5.5 UPGRADE UPGRADE A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause a
- CVE-2026-14478 HIGH 7.8 UPGRADE A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged atta
- CVE-2026-14479 MEDIUM 5.5 UPGRADE A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper v
FAQ
How do I fix autodesk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is autodesk being exploited right now?
None of the tracked autodesk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which autodesk CVE should I patch first?
CVE-2026-10709 currently ranks highest (30/100): A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflo.