CVE-2014-9268: Autodesk Design Review

Medium severity, CVSS 6.8. EPSS: 4.7% chance of exploitation in the next 30 days.

The AdView.AdViewer.1 ActiveX control in Autodesk Design Review (ADR) before 2013 Hotfix 1 allows remote attackers to execute arbitrary code via a crafted DWF file.

Affected products

• Autodesk Design Review: up to and including 2013

Published 2014-12-08. Last modified 2026-06-17.