Approved changes feed: RSS · Atom
cpe:2.3:a:autodesk:fusion:2705.1.30:*:*:*:*:*:*:*part: a version: 2705.1.30 update: *
| Vendor | Autodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e) |
|---|---|
| Product | Fusion (0fac8a36-8fcf-5dfb-8ec8-a570d168213a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-113775 |
vulnerable | 2026-11-03 10:16:27.069062 |
Dynamic Library Loading Process Control in Autodesk Fusion Desktop
HIGH (7.8)
A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to execute arbitrary code in the context of the current process.
Published: 2026-10-27T16:06:22.013Z
Updated: 2026-10-29T10:45:46.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-102637 |
vulnerable | 2026-11-03 10:15:45.712125 |
Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
HIGH (7.1)
A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
Published: 2026-10-27T16:05:20.237Z
Updated: 2026-11-04T20:25:46.888Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-102636 |
vulnerable | 2026-11-03 10:15:44.699669 |
Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
HIGH (7.1)
A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
Published: 2026-10-27T16:04:54.299Z
Updated: 2026-11-04T20:25:52.550Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-102638 |
vulnerable | 2026-11-03 10:15:44.426375 |
Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
HIGH (7.1)
A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
Published: 2026-10-27T16:05:47.605Z
Updated: 2026-11-04T20:25:40.468Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.