Autodesk Alias vulnerabilities

3 CVEs affecting Autodesk Alias, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-29068, published 2023-06-27.

More from Autodesk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-25003, published 2023-06-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to…
• CVE-2023-29068, published 2023-06-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code…
• CVE-2023-25004, published 2023-06-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.