ADSK-SA-2025-SHAI-HULUD-MALWARE-INCIDENT

Autodesk is aware of the recent compromise involving npm packages associated by Shai-hulud malware. Autodesk has not identified a direct impact to our products or services from this compromise. Supply chain risks continue to be monitored.

2025-09-23

ADSK-SA-2025-QIX-SUPPLY-CHAIN-INCIDENT

Autodesk is aware of compromised npm packages by Qix containing malicious code targeting cryptocurrency wallets. Autodesk has not identified a direct impact to our products or services from this compromise. Supply chain risks continue to be monitored.

2025-09-15

ADSK-SA-2025-0022

Autodesk Installer is affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-11-06

ADSK-SA-2025-0021

Autodesk Revit is affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-09-23

ADSK-SA-2025-0020

Autodesk Fusion is impacted by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-09-23

ADSK-SA-2025-0019

Certain Autodesk products use a shared component that is affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-09-22

ADSK-SA-2025-0018

Autodesk Revit and certain AutoCAD-based products are affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-09-16

ADSK-SA-2025-0017

Autodesk AutoCAD and certain AutoCAD-based products are affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-08-15

ADSK-SA-2025-0016

Autodesk 3ds Max is affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-08-06

ADSK-SA-2025-0015

Certain Autodesk products use a shared component that is affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-07-28

ADSK-SA-2025-0014

Certain Autodesk products are affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-07-24

ADSK-SA-2025-0013

Autodesk Revit is affected by this vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-07-22

adsk-sa-2025-microsoft-sharepoint-toolshell-vulnerability

Autodesk is aware of a recently disclosed Zero-Day vulnerability found in Microsoft SharePoint Server software. Following investigation, Autodesk has confirmed it does not use the affected versions of SharePoint and there is no impact on our systems.

2025-07-21

ADSK-SA-2025-0012

Autodesk Revit is affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-07-10

ADSK-SA-2025-0011

The USD (Universal Scene Description) plugin for Autodesk Maya has been affected by the vulnerability listed below. Exploitation of this vulnerability can lead to arbitrary code execution. Exploitation of this vulnerability requires user interaction.

2025-06-11

ADSK-SA-2025-0010

Autodesk Installer is affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution.

2025-06-10

ADSK-SA-2025-0009

Autodesk Revit is affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-06-02

adsk-sa-2025-0008

Autodesk is issuing this advisory to inform users of an issue involving the Maya "command port" feature, which may lead to command execution.

2025-05-02

ADSK-SA-2024-AUTODESK-USER-ACCOUNTS

1/10/25 - UPDATE: Autodesk has learned that suspected threat actors, believed to be linked to the threat activity we reported on in August 2024, have recently contacted some Autodesk customer organizations in the media and entertainment industry.

2025-01-10

ADSK-SA-2025-GENERAL-SCAM-WARNING

This security bulletin is a reminder to be aware of potential scams. For example, individuals or entities may falsely represent themselves as authorized Autodesk partners or as Autodesk recruiters.

2025-01-17

ADSK-SA-2025-0007

Certain Autodesk desktop products are affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-04-15

ADSK-SA-2025-0006

Certain Autodesk desktop products are affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-04-15

ADSK-SA-2025-0005

Autodesk Revit is affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-04-15

ADSK-SA-2025-0004

Autodesk AutoCAD and certain Autodesk desktop products are affected by the vulnerability listed below. Exploitation of this vulnerability can lead to code execution. Exploitation of this vulnerability requires user interaction.

2025-04-15

ADSK-SA-2025-0003

Certain Autodesk desktop products are affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-04-15

ADSK-SA-2025-0002

Autodesk Navisworks is affected by multiple DWFX vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-04-01

adsk-sa-2025-oracle-cloud-data-breach

Recent public articles claim a threat actor breached Oracle Cloud Infrastructure sign-on systems. While the data itself is not available for review, the Autodesk domain is claimed to be part of the data in some form.

2025-03-25

ADSK-SA-2025-0001

Autodesk AutoCAD and certain AutoCAD-based products are affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities can lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2025-03-13

ADSK-SA-2024-CROWDSTRIKE-UPDATE

On July 18th, a worldwide outage of Microsoft Windows computers was caused by an update from CrowdStrike for its Falcon Sensor product which is used for endpoint protection. Per CrowdStrike, this outage is not a cyberattack.

2024-07-19

ADSK-SA-2024-0027

Autodesk Navisworks is affected by multiple DWFX vulnerabilities listed below. Exploitation of these vulnerabilities may lead to code execution. Exploitation of these vulnerabilities requires user interaction.

2024-12-17

ADSK-SA-2024-0026

Autodesk Revit is affected by an SKP File Parsing Heap Corruption vulnerability. Exploitation of this vulnerability requires user interaction and may lead to an application crash or arbitrary code execution.

2024-12-09

ADSK-SA-2024-0025

Autodesk Revit is affected by an Untrusted Search Path vulnerability. Exploitation of this vulnerability requires user interaction and may lead to arbitrary code execution.

2024-12-09

ADSK-SA-2024-0024

Autodesk Revit is affected by a PDF File Parsing vulnerability. Exploitation of this vulnerability requires user interaction and can cause a crash.

2024-12-09

ADSK-SA-2024-0023

Autodesk desktop applications utilizing the Autodesk Installer have been affected by an insecure temporary file vulnerability that allows a non-admin user to escalate their privileges. Exploitation of this vulnerability can lead to code execution.

2024-11-14

ADSK-SA-2024-0022

Autodesk VRED Design is affected by an untrusted search path vulnerability listed below. Exploitation of this vulnerability may lead to code execution.

2024-11-05

ADSK-SA-2024-0021

Autodesk AutoCAD and certain Autodesk desktop products are affected by Out-of-Bounds Write and Stack-based Buffer Overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

2024-10-29

ADSK-SA-2024-0020

Autodesk AutoCAD and certain AutoCAD-based products are affected by the vulnerability listed below. Exploitation of this vulnerability may lead to code execution.

2024-10-29

ADSK-SA-2024-0019

Autodesk AutoCAD and certain AutoCAD-based products are affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities may lead to code execution.

2024-10-29

ADSK-SA-2024-0018

Autodesk Revit is affected by a PDF file parsing vulnerability. Exploitation of this vulnerability requires user interaction and may lead to remote code execution.

2024-10-15

ADSK-SA-2024-0017

Autodesk Revit is affected by a file parsing vulnerability. Exploitation of this vulnerability requires user interaction and may lead to remote code execution.

2024-10-15

ADSK-SA-2024-0016

Autodesk InfraWorks has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices.

2024-10-02

ADSK-SA-2024-0015

Autodesk Navisworks is affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities may lead to remote code execution.

2024-09-29

ADSK-SA-2024-0014

Autodesk AutoCAD and certain AutoCAD-based products are affected by an Out-of-Bounds Write vulnerability. Exploitation of this vulnerability may lead to code execution.

2024-08-19

ADSK-SA-2024-0013

Autodesk Revit is affected by a Stack-based Overflow vulnerability. Exploitation of this vulnerability requires user interaction and may lead to code execution.

2024-08-20

ADSK-SA-2024-0012

Autodesk InfraWorks has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes ar

2024-07-16

ADSK-SA-2024-0011

A Python-based exploit has been identified in Autodesk Maya and a free plugin is now available in the Autodesk App Store to help detect and resolve potential issues caused by this malicious code. Exploitation of this vulnera

2024-06-17

ADSK-SA-2024-0010

Autodesk AutoCAD and certain AutoCAD-based products are affected by Out-of-Bounds Write, Out-of-Bounds Read, Heap-based Overflow, Use-After-Free, Memory Corruption, and Uninitialized Variable vulnerabilities. Exploitation of

2024-06-17

ADSK-SA-2024-0009

Autodesk AutoCAD and certain AutoCAD-based products are being affected by Out-of-Bounds Write, Out-of-Bounds Read, Heap based Overflow, Stack-based Overflow, Use-After-Free, Memory Corruption, Double Free, and Uninitialized

2024-05-31

ADSK-SA-2024-0008

Autodesk’s InfraWorks has been affected by third-party component vulnerabilities. Exploitation of these vulnerabilities could lead to remote code execution and/or denial-of-service to the software and user devices.

2024-05-15

ADSK-SA-2024-0007

Autodesk is aware of the XZ security vulnerabilities. Refer to our security advisory for a comprehensive list of potentially impacted Autodesk products and services, along with our current recommendations.

2024-04-08

ADSK-SA-2024-0006

Autodesk DWG TrueView product has been affected by Stack-based Overflow vulnerability.

2024-03-14

ADSK-SA-2024-0005

Applications and services utilizing the Autodesk FBX Review software have been affected by an Out-Of-Bounds Write vulnerability. Exploitation of these vulnerabilities may lead to code execution.

2024-03-14

ADSK-SA-2024-0004

Autodesk AutoCAD and certain AutoCAD-based products may be affected by Out-of-Bounds write, Stack-based Overflow, Heap based Overflow, Use-After-Free, Memory Corruption, Untrusted Pointer Dereference, Heap-based Buffer Overf

2024-02-29

ADSK-SA-2024-0003

Autodesk Desktop Licensing Service has been affected by a reachable assertion vulnerability detailed below. Exploitation of this vulnerability could lead to denial of service due to multiple assertions.

2024-02-22

ADSK-SA-2024-0002

ZDI published zero-day vulnerabilities on February 12th for versions of Autodesk AutoCAD products. Fixes for these vulnerabilities will be issued for affected versions of AutoCAD in an upcoming release. Please note, this adv

2024-02-14

ADSK-SA-2024-0001

Autodesk InfraWorks has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes ar

2024-01-31

ADSK-SA-2023-0025

Autodesk FBX SDK is affected by an Out-of-Bounds Write vulnerability. Exploitation of this vulnerability may lead to code execution. Exploitation of this vulnerability requires user interaction.

2024-12-09

ADSK-SA-2023-0024

Autodesk InfoWorks WS Pro and InfoWorks ICM have been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial of service to the software and

2023-12-22

ADSK-SA-2023-0023

Autodesk® Infrastructure Parts Editor has been affected by third party component vulnerabilities. Exploitation of these vulnerabilities could lead to code execution and/or denial-of-service.

2023-12-05

ADSK-SA-2023-0022

Autodesk Desktop Licensing Service has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities could lead to code execution due to weak permissions.

2023-11-27

ADSK-SA-2023-0021

Autodesk has revoked the certificate on August 5th for all software code signed after July 10, 2022 (00:00 GMT). Autodesk has issued updates signed using a new digital certificate for AutoCAD-based products. Please note, onl

2023-11-15

ADSK-SA-2023-0020

This advisory is about access to support case data via the Autodesk Customer Portal for all Autodesk products.

2023-10-19

ADSK-SA-2023-0019

Applications and services utilizing Autodesk Civil 3D have been affected by a LibXml2 vulnerability.

2023-08-29

ADSK-SA-2023-0018

Autodesk AutoCAD and certain AutoCAD-based products have been affected by Out-of-Bounds Write, Heap-based Buffer Overflow, Untrusted Pointer Dereference, and Memory Corruption vulnerabilities.

2023-08-24

ADSK-SA-2023-0017

Autodesk® applications and services that utilize the PSKernel Component may be affected by Out-of-Bounds Read, Integer Overflow and Memory Corruption Write vulnerabilities. Exploitation of these vulnerabilities may lead to c

2023-07-27

ADSK-SA-2023-0016

Autodesk FeatureCAM software has been affected by Memory Corruption vulnerabilities. Exploitation of these vulnerabilities may lead to code execution and/or denial-of-service. Autodesk

2023-06-23

ADSK-SA-2023-0015

Autodesk products leveraging internal components, Autodesk Material Management, and those implicitly importing vulnerable versions expat and libcurl may be impacted by Out-of-bound Write, User-After-Free, Information Disclos

2023-06-23

ADSK-SA-2023-0014

Applications and services utilizing Autodesk Civil3D have been affected by an SQLite vulnerability.

2023-06-20

ADSK-SA-2023-0013

Applications and services utilizing the Autodesk Desktop Connector have been affected by a Privilege Escalation vulnerability.

2023-06-19

ADSK-SA-2023-0012

Autodesk InfraWorks has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes ar

2023-06-14

ADSK-SA-2023-0011

Autodesk® Desktop Licensing Installer has been affected by privilege escalation vulnerabilities. Exploitation of these vulnerabilities could lead to code execution due to weak permissions.

2023-06-12

ADSK-SA-2023-0010

Applications and services utilizing the Autodesk installer have been affected by a Privilege Escalation vulnerability.

2023-04-25

ADSK-SA-2023-0009

Multiple Autodesk products have been affected by out-of-bound-read, out-of-bound-write, Integer Overflow, and Memory Corruption vulnerabilities.

2023-04-23

ADSK-SA-2023-0008

USD (Universal Scene Description) plugin for Autodesk® 3ds Max® has been affected by file-parsing uninitialized variable, use-after-free, out-of-bounds read, and out-of-bounds write vulnerabilities.

2023-04-27

ADSK-SA-2023-0007

Autodesk® InfraWorks® has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes

2023-04-17

ADSK-SA-2023-0006

Applications and services utilizing Autodesk InfraWorks have been affected by a use-after-free vulnerability. The exploitation of these vulnerabilities may lead to code execution. Hotfixes are available in the Autodesk Deskt

2023-04-17

ADSK-SA-2023-0005

Multiple Autodesk® AutoCAD® and AutoCAD-based products have been affected by Out-of-Bounds Read, Integer Overflow, Stack Buffer Overflow, Memory Corruption Read, and Memory Corruption Write vulnerabilities.

2023-04-06

ADSK-SA-2023-0004

Applications and services utilizing the Autodesk® FBX® SDK software have been affected by an Out-Of-Bounds Write and Stack Buffer Overflow vulnerabilities. Exploitation of these vulnerabilities may lead to information disclo

2023-03-29

ADSK-SA-2023-0003

USD (Universal Scene Description) plugin for Autodesk® Maya® has been affected by a file uninitialized variable, out-of-bounds read, and out-of-bounds write vulnerabilities.

2023-03-29

ADSK-SA-2023-0002

Applications and services that utilize Sketchup components used by Autodesk products may be impacted by Use-after-free vulnerability.

2023-03-25

ADSK-SA-2022-0025

Applications and services that utilize Image Processing component used by Autodesk products may be impacted by Out-of-bound Read, Heap-based Overflow, Out-of-bound Write, Memory corruption, and Use-after-free vulnerabilities

2022-12-14

ADSK-SA-2022-0024

DWG TrueView™ product has been affected by a Search Order Hijacking vulnerability.

2022-11-15

ADSK-SA-2022-0023

Autodesk products leveraging the third-party component Zlib, and those implicitly importing vulnerable versions of Zlib, may be impacted by Out-of-bound Write vulnerability.

2022-09-23

ADSK-SA-2022-0022

Applications and services utilizing the Autodesk® FBX® SDK software have been affected by an Out-Of-Bounds Read, Out-Of-Bounds Write, and Use-After-Free vulnerabilities. Exploitation of these vulnerabilities may lead to code

2022-09-14

ADSK-SA-2022-0021

Applications and Services that utilize Autodesk Design Review and AutoCAD products may be affected by Heap Based Overflow and Memory Corruption vulnerabilities. Exploitation of these vulnerabilities could lead to remote code

2022-09-22

ADSK-SA-2022-0020

Multiple Autodesk AutoCAD, AutoCAD-based products, and Maya have been affected by Out-of-bound Read, Out-of-bound Write, Use of Uninitialized Variable, Heap based Buffer Overflow, and Memory Corruption vulnerabilities.

2022-09-22

ADSK-SA-2022-0017

Autodesk products leveraging internal components, Autodesk Material Management and thus implicitly importing vulnerable versions expat and libcurl may be impacted by Out-of-bound Read, User-After-Free, NULL Pointer Dereferen

2022-07-28

ADSK-SA-2022-0016

Autodesk products and dependent application, services using OpenSSL component may be impacted by Loop with Unreachable Exit Condition ('Infinite Loop') vulnerabilities. Exploitation of these vulnerabilities may lead to code

2022-07-28

ADSK-SA-2022-0015

Autodesk® desktop app (ADA) product have been affected by Improper Privilege Management vulnerability detailed below. Exploitation of these vulnerabilities may lead to code execution and/or denial-of-service to the software

2022-07-22

ADSK-SA-2022-0014

Multiple Autodesk products have been affected by Out-of-bound Read vulnerability.

2022-07-14

ADSK-SA-2022-0013

Autodesk® Fusion 360® has been affected by XML External Entities (XXE) vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user

2022-06-13

ADSK-SA-2022-0012

Autodesk® InfraWorks® has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes

2022-06-03

ADSK-SA-2022-0011

Applications and Services that utilize versions of PDFTron prior to 9.1.17 may be impacted by Heap-based Buffer Overflow, and Untrusted Pointer Dereference vulnerabilities.

2022-05-25

ADSK-SA-2022-0010

Applications and services that utilize Autodesk 3ds Max may be affected by Out-of-bound Read/Write vulnerabilities. Exploitation of these vulnerabilities may lead to remote code execution.

2022-05-04

ADSK-SA-2022-0009

Applications and Services that utilize Autodesk Design Review may be affected by Double Free, and Out-of-bound Read/Write vulnerabilities. Exploitation of these vulnerabilities could lead to remote code execution.

2022-04-28

ADSK-SA-2022-0008

Autodesk® InfraWorks® has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes

2022-04-20

ADSK-SA-2022-0007

Applications and Services that utilize certain Autodesk products are affected by Out-of-bounds Read, Out-of-bounds Write, untrusted pointer Dereference, and memory corruption vulnerabilities. Exploitation of these vulnerabil

2022-02-28

ADSK-SA-2022-0006

Applications and services utilizing the Autodesk FBX Review have been affected by an Out-Of-Bounds Read vulnerability. Exploitation of these vulnerabilities may lead to code execution and/or denial-of-service.

2022-02-28

ADSK-SA-2022-0005

Multiple Autodesk products have been affected by Use After Free, Out-of-bound-write, Stack-based Buffer, Memory Corruption, and Buffer Overflow vulnerabilities.

2022-02-28

ADSK-SA-2022-0004

Applications and services that utilize Autodesk Design Review, Advance Steel, Civil 3D® and AutoCAD products may be affected by Double Free, Heap Overflow, Out-of-bound Read/Write, Use-After-Free, and Type Confusion vulnerab

2022-01-14

ADSK-SA-2022-0003

Applications and Services that utilize the Log4net.dll earlier than 2.0.10 version can be impacted by Improper Restriction of XML External Entity Reference ('XXE') vulnerabilities.

2022-01-12

ADSK-SA-2022-0002

Applications and Services that utilize certain Autodesk products may be affected by Out-of-bounds Read, Out-of-bounds Write, and Information disclosure vulnerabilities. Exploitation of these vulnerabilities in conjunction wi

2022-01-12

ADSK-SA-2022-0001

Autodesk® InfraWorks® has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes

2022-01-13