Autodesk Navisworks Simulate vulnerabilities
25 known vulnerabilities affecting autodesk/navisworks_simulate.
Total CVEs
25
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH25
Vulnerabilities
Page 2 of 2
CVE-2025-1658P3HIGHCVSS 7.8≥ 2025, < 2025.52025-04-01
CVE-2025-1658 [HIGH] CWE-125 CVE-2025-1658: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-7670P3HIGHCVSS 7.8≥ 2025, < 2025.3≥ 2024, < 2024.3+2 more2024-09-30
CVE-2024-7670 [HIGH] CWE-125 CVE-2024-7670: A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
nvd
CVE-2025-5039P3HIGHCVSS 7.8≥ 2026, < 2026.0.22025-07-24
CVE-2025-5039 [HIGH] CWE-426 CVE-2025-5039: A maliciously crafted binary file, when present while loading files in certain Autodesk applications
A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized.
nvd
CVE-2024-7674P3HIGHCVSS 7.8≥ 2025, < 2025.3≥ 2024, < 2024.3+2 more2024-09-30
CVE-2024-7674 [HIGH] CWE-122 CVE-2024-7674: A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a
A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
nvd
CVE-2024-7673P3HIGHCVSS 7.8≥ 2025, < 2025.3≥ 2024, < 2024.3+2 more2024-09-30
CVE-2024-7673 [HIGH] CWE-122 CVE-2024-7673: A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a H
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
nvd
← Previous2 / 2