Autodesk Desktop vulnerabilities

2 CVEs affecting Autodesk Desktop, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-33882, published 2022-10-03.

More from Autodesk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-33882, published 2022-10-03. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation in Autodesk desktop app (ADA). An attacker could leverage…
• CVE-2019-7365, published 2019-12-03. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An attacker may trick a user into downloading a malicious DLL file into the working directory, which may…