CVE-2022-27528: Autodesk Navisworks

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

Affected products

• Autodesk Navisworks: from 2022, before 2022.2 (fixed in 2022.2)

Published 2022-04-11. Last modified 2026-06-17.