Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductNavisworks Simulate (c4b80a40-3ee7-569d-b525-65f5eb99d9d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5039 vulnerable 2026-06-08 07:35:23.986440 Privilege Ecalation due to Untrusted Search Path Vulnerability
HIGH (7.8)
A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.
Published: 2025-07-24T17:11:14.714Z
Updated: 2026-05-28T19:50:20.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1276 vulnerable 2026-06-08 07:08:36.198694 DWG File Parsing Out-of-Bounds Write Vulnerability
HIGH (7.8)
A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Published: 2025-04-15T20:55:04.255Z
Updated: 2026-02-26T18:28:17.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7675 vulnerable 2026-06-08 06:58:22.979491 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software
HIGH (7.8)
A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Published: 2024-09-30T20:30:31.826Z
Updated: 2025-08-26T18:23:05.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7674 vulnerable 2026-06-08 06:58:22.977628 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software
HIGH (7.8)
A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Published: 2024-09-30T20:30:07.187Z
Updated: 2025-08-26T18:17:27.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7673 vulnerable 2026-06-08 06:58:22.965640 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software
HIGH (7.8)
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Published: 2024-09-30T20:29:24.756Z
Updated: 2025-08-26T18:16:57.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7672 vulnerable 2026-06-08 06:58:22.964352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7671 vulnerable 2026-06-08 06:58:22.962873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7670 vulnerable 2026-06-08 06:58:22.950727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.