Inventor
Vendor:
First CVE: Dec 31, 2005 · Active for 20 years
14
Total CVEs
More Total CVEs than 92% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Inventor over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 31, 2005
20 years ago
Most Recent CVE
Jul 24, 2025
368 days ago
CVE Severity & Scoring
Inventor14 CVEs
93%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local13 (92.9%)
Network0 (0.0%)
Unknown1 (7.1%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (92.9%)
High0 (0.0%)
Unknown1 (7.1%)
User Interaction
None0 (0.0%)
Unknown1 (7.1%)
Required13 (92.9%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None13 (92.9%)
Unknown1 (7.1%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-40159HIGH An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through malici | Jan 25, 2022 | 7.8 | 27 | NO | NO |
CVE-2021-40158HIGH A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerab | Jan 25, 2022 | 7.8 | 27 | NO | NO |
CVE-2021-40164HIGH A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. | Oct 7, 2022 | 7.8 | 26 | NO | NO |
CVE-2021-40163HIGH A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. | Oct 7, 2022 | 7.8 | 26 | NO | NO |
CVE-2021-40166HIGH A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability ma | Oct 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-40165HIGH A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC fil | Oct 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-40162HIGH A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC | Oct 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-25788HIGH A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbit | Apr 19, 2022 | 7.8 | 25 | NO | NO |
CVE-2025-1276HIGH A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability | Apr 15, 2025 | 7.8 | 23 | NO | NO |
CVE-2025-5039HIGH A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current proces | Jul 24, 2025 | 7.8 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Inventor
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9 | 1 | 4.6 | 0.6% | 0 | 0 |
| 2022 | 1 | 7.8 | 2.3% | 0 | 0 |
| 2021 | 2 | 7.8 | 2.6% | 0 | 0 |
| 2020 | 2 | 7.8 | 2.6% | 0 | 0 |
| 2019 | 2 | 7.8 | 2.6% | 0 | 0 |
| 10 | 1 | 4.6 | 0.6% | 0 | 0 |