Known vulnerabilities in Fusion 360

Vendor: Autodesk
Software: Fusion 360
Software CPE: cpe:2.3:a:autodesk:fusion_360:*:*:*:*:*:*:*:*
Website: https://www.autodesk.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fusion 360 Fusion 360 is affected by 9 known vulnerabilities: 1 high, 2 medium, 6 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135122 - Improper Access Control
CVE-2026-10789		 CWE-284 High
No
No
 2703.1.20 24.06.2026 SB2026062443
#VU125983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-4369		 CWE-79 Low
No
No
 2702.1.47 14.04.2026 SB20260414109
#VU125984 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-4344		 CWE-79 Low
No
No
 2702.1.47 14.04.2026 SB20260414109
#VU125985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-4345		 CWE-79 Low
No
No
 2702.1.47 14.04.2026 SB20260414109
#VU121956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0535		 CWE-79 Low
No
No
 2606.1.22 22.01.2026 SB2026012286
#VU121955 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0534		 CWE-79 Low
No
No
 2606.1.22 22.01.2026 SB2026012286
#VU121954 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-0533		 CWE-79 Low
No
No
 2606.1.22 22.01.2026 SB2026012286
#VU116032 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-10244		 CWE-94 Medium
No
No
 2604.1.25 23.09.2025 SB2025092358
#VU64504 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-27873		 CWE-611 Medium
No
No
 2.0.12888 20.06.2022 SB2022062014