Navisworks
Vendor:
First CVE: Sep 15, 2021 · Active for 4 years
47
Total CVEs
More Total CVEs than 98% of tracked products
9.4
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 66% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Navisworks over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 15, 2021
4 years ago
Most Recent CVE
Apr 1, 2025
482 days ago
CVE Severity & Scoring
Navisworks47 CVEs
100%
All CVEs352,785 CVEs
45%
40%
11%
High
Attack Vector
Local47 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low47 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required47 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None47 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (47 CVEs).
47 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-40164HIGH A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. | Oct 7, 2022 | 7.8 | 26 | NO | NO |
CVE-2021-40163HIGH A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. | Oct 7, 2022 | 7.8 | 26 | NO | NO |
CVE-2021-40166HIGH A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability ma | Oct 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-40165HIGH A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC fil | Oct 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-40162HIGH A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC | Oct 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-27527HIGH A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, | Apr 19, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-25796HIGH A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is requ | Apr 11, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-25792HIGH A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vuln | Apr 11, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-40161HIGH A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version. | Dec 23, 2021 | 7.8 | 25 | NO | NO |
CVE-2021-40160HIGH PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitra | Dec 23, 2021 | 7.8 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (47 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (47 CVEs).
Media Mentions
Signals from CVEs in this product scope (47 CVEs).
Top CNAs Publishing CVEs For Navisworks
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2025.2 | 6 | 7.8 | 0.2% | 0 | 0 |
| 2025.1 | 6 | 7.8 | 0.2% | 0 | 0 |
| 2025 | 6 | 7.8 | 0.2% | 0 | 0 |
| 2023 | 2 | 7.8 | 0.3% | 0 | 0 |
| 2022 | 8 | 7.8 | 0.7% | 0 | 0 |
| 2021 | 4 | 7.8 | 0.8% | 0 | 0 |
| 2020 | 5 | 7.8 | 0.8% | 0 | 0 |
| 2019 | 5 | 7.8 | 0.8% | 0 | 0 |