Autocad

Vendor:

First CVE: Dec 31, 2005 · Active for 20 years

163
Total CVEs
More Total CVEs than 99% of tracked products
16.3
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 66% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Autocad over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 31, 2005
20 years ago
Most Recent CVE
Sep 16, 2025
314 days ago

CVE Severity & Scoring

Autocad163 CVEs
All CVEs352,785 CVEs
LowMediumHighCritical
Attack Vector
Local153 (93.9%)
Network5 (3.1%)
Unknown5 (3.1%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low158 (96.9%)
High0 (0.0%)
Unknown5 (3.1%)
User Interaction
None7 (4.3%)
Unknown5 (3.1%)
Required151 (92.6%)
Privileges Required
Low2 (1.2%)
High0 (0.0%)
None156 (95.7%)
Unknown5 (3.1%)

Top CVEs

Signals from CVEs in this product scope (163 CVEs).

163 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) IBFS32.DLL file in the current
Sep 7, 20126.929NOYES
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through malici
Jan 25, 20227.827NONO
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerab
Jan 25, 20227.827NONO
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to exe
Aug 15, 20257.826NONO
A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause
Aug 15, 20257.826NONO
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to c
Aug 15, 20257.826NONO
A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along w
Nov 23, 20239.826NONO
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability
Nov 23, 20239.826NONO
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
Oct 7, 20227.826NONO
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component.
Oct 7, 20227.826NONO

Exploit Exposure

Signals from CVEs in this product scope (163 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
0.6% of CVEs· 85th percentile

Social Chatter

Signals from CVEs in this product scope (163 CVEs).

Media Mentions

Signals from CVEs in this product scope (163 CVEs).

Top CNAs Publishing CVEs For Autocad

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
202637.80.2%00
202517.80.2%00
2023187.80.4%00
2022177.80.4%00
2021177.80.5%00
2020187.80.5%00
2019177.80.5%00
201857.81.6%00
201717.81.9%00
201416.82.7%00
201316.82.7%00
201216.82.7%00
201116.82.7%00
201016.90.8%01
200614.60.6%00
200514.60.6%00