Autodesk Fusion
13 CVEs affecting Autodesk Fusion. Latest disclosed: 2026-06-22. Critical: 1, High: 12.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-10789 | Critical | 9.6 | 2026-06-22 | A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MC… |
CVE-2025-10244 | High | 8.7 | 2025-09-23 | A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting (XSS) vulnerability. A… |
CVE-2026-0535 | High | 8.1 | 2026-01-22 | A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in… |
CVE-2026-0534 | High | 8.1 | 2026-01-22 | A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Au… |
CVE-2026-0533 | High | 8.1 | 2026-01-22 | A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-sit… |
CVE-2021-40166 | High | 7.8 | 2022-10-07 | A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them… |
CVE-2021-40165 | High | 7.8 | 2022-10-07 | A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF… |
CVE-2021-40164 | High | 7.8 | 2022-10-07 | A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. |
CVE-2021-40163 | High | 7.8 | 2022-10-07 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. |
CVE-2021-40162 | High | 7.8 | 2022-10-07 | A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TI… |
CVE-2026-4369 | High | 7.1 | 2026-04-14 | A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Store… |
CVE-2026-4345 | High | 7.1 | 2026-04-14 | A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk… |
CVE-2026-4344 | High | 7.1 | 2026-04-14 | A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-… |