Known vulnerabilities in Autodesk AutoCAD 2024
Vendor:
Autodesk
Software:
Autodesk AutoCAD
Version:
2024
Software CPE:
cpe:2.3:a:autodesk:autodesk_autocad:*:*:*:*:*:*:*:*
Website:
https://www.autodesk.com/
Total vulnerabilities:
17
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
2027.1
2027.0
2024.1.8
2025.1.3
2026
2026.3
2026.2
2026.1
2026.0
2024.1.7
2023.1.7
2023.1.6
2025.1.2
2024.1.6
2025.1.1
2025.1
2025
2024.1.2
2024.1.1
2024.1.4
2021.1.4
2022.1.4
2023.1.5
2024.1.3
2024
2023.1.4
2023.1.3
2020.1.2
2020.1.1
2020.1.6
2021.1.3
2023.1.1
2022.1.3
2023.1
2023
2023.0.1
-
2019.1.4
2020.1.5
2021.1.2
2022.1.2
2019.1.3
2020.1.4
2021.1.1
2022.0.1
2019
2020
2021
2022
2007
2011
2012
2013
2014
2010
2006
2005
Vulnerabilities (17)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU115965 - Heap-based Buffer Overflow CVE-2025-8894 |
CWE-122 | High | 2024.1.8, 2025.1.3, 2026.1 | 19.09.2025 |
SB20250919147 |
||
| #VU115964 - Out-of-bounds write CVE-2025-8893 |
CWE-787 | High | 2024.1.8, 2025.1.3, 2026.1 | 19.09.2025 |
SB20250919147 |
||
| #VU107492 - Out-of-bounds write CVE-2025-1276 |
CWE-787 | High | 2023.1.7, 2024.1.7, 2025.1.2 | 16.04.2025 |
SB2025041640 |
||
| #VU107485 - Heap-based Buffer Overflow CVE-2025-1275 |
CWE-122 | High | 2023.1.7, 2024.1.7, 2025.1.2 | 16.04.2025 |
SB2025041640 |
||
| #VU99504 - Memory corruption CVE-2024-8592 |
CWE-119 | High | 2024.1.6 | 30.10.2024 |
SB2024103022 |
||
| #VU92230 - Out-of-bounds write CVE-2024-23150 |
CWE-787 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92231 - Out-of-bounds write CVE-2024-23151 |
CWE-787 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92232 - Out-of-bounds read CVE-2024-23152 |
CWE-125 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92233 - Out-of-bounds read CVE-2024-23153 |
CWE-125 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92234 - Heap-based Buffer Overflow CVE-2024-23154 |
CWE-122 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92235 - Heap-based Buffer Overflow CVE-2024-23155 |
CWE-122 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92236 - Memory corruption CVE-2024-23156 |
CWE-119 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92237 - Use After Free CVE-2024-23158 |
CWE-416 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92238 - Use of Uninitialized Variable CVE-2024-23159 |
CWE-457 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92239 - Out-of-bounds write CVE-2024-36999 |
CWE-787 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU92240 - Out-of-bounds write CVE-2024-23157 |
CWE-787 | High | - | 19.06.2024 |
SB2024061909 |
||
| #VU88056 - Stack-based buffer overflow CVE-2024-23138 |
CWE-121 | High | 2021.1.4, 2022.1.4, 2023.1.5, 2024.1.3 | 03.04.2024 |
SB2024040310 |