| CVE-2026-113775 |
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command…
|
7.8
High
|
Oct 27, 2026 |
| CVE-2026-102638 |
Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
|
7.1
High
|
Oct 27, 2026 |
| CVE-2026-102637 |
Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
|
7.1
High
|
Oct 27, 2026 |
| CVE-2026-102636 |
Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
|
7.1
High
|
Oct 27, 2026 |
| CVE-2026-85217 |
A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network…
|
8.6
High
|
Sep 10, 2026 |
| CVE-2026-10789 |
A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension…
|
9.6
Critical
|
Jun 22, 2026 |
| CVE-2026-4344 |
A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked…
|
7.1
High
|
Apr 14, 2026 |
| CVE-2026-4345 |
A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site…
|
7.1
High
|
Apr 14, 2026 |
| CVE-2026-4369 |
A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and…
|
7.1
High
|
Apr 14, 2026 |
| CVE-2026-0535 |
A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can trigger a Stored…
|
8.1
High
|
Jan 22, 2026 |
| CVE-2026-0534 |
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored…
|
8.1
High
|
Jan 22, 2026 |
| CVE-2026-0533 |
A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation dialog and clicked by…
|
8.1
High
|
Jan 22, 2026 |
| CVE-2025-10244 |
A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored…
|
8.7
High
|
Sep 23, 2025 |