Autodesk
First CVE: Apr 9, 2019Active for: 7 years
340
CVEs Published
More CVEs Published than 84% of tracked CNAs
42.5
Avg CVEs / Year
More Avg CVEs / Year than 82% of tracked CNAs
7.8
Avg CVSS Score
Higher Avg CVSS Score than 79% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Self-Reporting Analysis
Of all the CVEs published by Autodesk as a CNA, 99.7% affect products that Autodesk develops as a vendor.
99.7%
Self-reported: 339Third-party: 1
Of all the CVEs published that affect products developed by Autodesk, 93.1% are self-published by Autodesk as a CNA.
93.1%
Self-published: 339Published by other CNAs: 25
Trends Over Time
The number and severity of CVEs published by Autodesk over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 9, 2019
7 years ago
Most Recent CVE
Jun 22, 2026
32 days ago
Top CVEs
All CVEs published by Autodesk as a CNA, regardless of affected vendor or product.
340 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-27030HIGH A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code | Apr 19, 2021 | 7.8 | 60 | NO | NO |
CVE-2026-10789CRITICAL A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that coul | Jun 22, 2026 | 9.6 | 39 | NO | NO |
CVE-2026-7454HIGH A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi | May 26, 2026 | 7.8 | 33 | NO | NO |
CVE-2022-33882CRITICAL Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation in Autodesk desktop app (ADA). An attack | Oct 3, 2022 | 9.8 | 31 | NO | NO |
CVE-2026-0533HIGH A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vul | Jan 22, 2026 | 8.1 | 30 | NO | NO |
CVE-2026-7452HIGH A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbi | May 26, 2026 | 7.8 | 29 | NO | NO |
CVE-2026-7451HIGH A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a c | May 26, 2026 | 7.8 | 29 | NO | NO |
CVE-2026-0535HIGH A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion | Jan 22, 2026 | 8.1 | 29 | NO | NO |
CVE-2026-0534HIGH A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop | Jan 22, 2026 | 8.1 | 29 | NO | NO |
CVE-2025-10244HIGH A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting (XSS) vulnerability. A malicious actor may l | Sep 23, 2025 | 8.7 | 29 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA340 CVEs
95%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local321 (94.4%)
Network19 (5.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low340 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None15 (4.4%)
Unknown0 (0.0%)
Required325 (95.6%)
Privileges Required
Low5 (1.5%)
High0 (0.0%)
None335 (98.5%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (340 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Autodesk as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Autodesk as a CNA — matched by CVE ID, not by organization name.