Civil 3d

Vendor:

First CVE: Apr 9, 2019 · Active for 7 years

89
Total CVEs
More Total CVEs than 99% of tracked products
17.8
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 66% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Civil 3d over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 9, 2019
7 years ago
Most Recent CVE
Sep 16, 2025
315 days ago

CVE Severity & Scoring

Civil 3d89 CVEs
All CVEs353,240 CVEs
LowHigh
Attack Vector
Local89 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low89 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required89 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None89 (100.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (89 CVEs).

89 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-40159HIGH
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through malici
Jan 25, 20227.827NONO
CVE-2021-40158HIGH
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerab
Jan 25, 20227.827NONO
CVE-2025-5048HIGH
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to exe
Aug 15, 20257.826NONO
CVE-2025-5047HIGH
A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause
Aug 15, 20257.826NONO
CVE-2025-5046HIGH
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to c
Aug 15, 20257.826NONO
CVE-2021-27041HIGH
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code
Jun 25, 20217.826NONO
CVE-2025-8894HIGH
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to c
Sep 16, 20257.825NONO
CVE-2025-8893HIGH
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to
Sep 16, 20257.825NONO
CVE-2024-23120HIGH
A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A maliciou
Feb 22, 20247.825NONO
CVE-2022-25788HIGH
A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbit
Apr 19, 20227.825NONO
View all 89 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (89 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (89 CVEs).

Media Mentions

Signals from CVEs in this product scope (89 CVEs).

Top CNAs Publishing CVEs For Civil 3d

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
202637.80.2%00
202517.80.2%00
202017.81.9%00
201917.81.9%00
201857.81.6%00
201717.81.9%00