7.8
High
CVE-2026-0662 A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of…
Description
A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 3ds Max 2026 | 2026 → < 2026.3.2 | 2026.3.2 |
Other CVEs of 3ds Max
The 23 CVEs of 3ds Max →
CVE-2026-19568
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability
7.8
High
CVE-2026-7455
A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability
7.8
High
CVE-2026-16783
A maliciously crafted ABC file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability
7.8
High
CVE-2026-16782
A maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability
5.3
Medium