Product by Autodesk
Autodesk Fusion
18 known vulnerabilities in Autodesk Fusion (Autodesk), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-10789 | MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop | 9.6 | |
| High | CVE-2026-0533 | Stored XSS in Fusion desktop when attempting to delete a file | 8.1 | |
| High | CVE-2026-0535 | Stored XSS in Electronic Library Component Description | 8.1 | |
| High | CVE-2021-40164 | Autodesk Infraworks: Heap-Based Buffer Overflow | 7.8 | |
| High | CVE-2021-40165 | Autodesk Infraworks: Code Execution | 7.8 | |
| High | CVE-2021-40162 | Autodesk Infraworks: Code Execution | 7.8 | |
| High | CVE-2021-40166 | Autodesk Infraworks: Code Execution | 7.8 | |
| High | CVE-2021-40163 | Autodesk Infraworks: Memory Corruption | 7.8 | |
| High | CVE-2026-0534 | Stored XSS in the value of a part attribute | 8.1 | |
| High | CVE-2026-85217 | Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop | 8.6 | |
| High | CVE-2026-113775 | Dynamic Library Loading Process Control in Autodesk Fusion Desktop | 7.8 | |
| High | CVE-2025-10244 | HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability | 8.7 | |
| High | CVE-2026-102638 | Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop | 7.1 | |
| High | CVE-2026-102637 | Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop | 7.1 | |
| High | CVE-2026-102636 | Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop | 7.1 | |
| High | CVE-2026-4345 | Stored Cross-Site Scripting (XSS) Vulnerability in Design Name | 7.1 | |
| High | CVE-2026-4344 | Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name | 7.1 | |
| High | CVE-2026-4369 | Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name | 7.1 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,