CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,476 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,476
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product autodesk:3ds_max. Show all products

18 CVEs, showing 1 to 18
CVESeverityTitlePublished
CVE-2025-11795High 7.8A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.Nov 12, 2025
CVE-2025-11797High 7.8A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability.Nov 12, 2025
CVE-2026-0537High 8.4A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.Feb 4, 2026
CVE-2026-0538High 8.4A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.Feb 4, 2026
CVE-2026-0660High 8.4A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability.Feb 4, 2026
CVE-2026-0661High 8.4A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.Feb 4, 2026
CVE-2026-0662High 7.8A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path b…Feb 4, 2026
CVE-2026-0536High 7.8A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability.Feb 4, 2026
CVE-2026-7450Medium 5.5A maliciously crafted PAR file, when parsed through Autodesk 3ds Max, can force a NULL Pointer Dereference vulnerability.May 26, 2026
CVE-2026-7451High 7.8A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.May 26, 2026
CVE-2026-7452High 7.8A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.May 26, 2026
CVE-2026-7453Medium 5.5A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-service condition.May 26, 2026
CVE-2026-7454High 7.8A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability.May 26, 2026
CVE-2026-16781Medium 5.5SVG File Parsing Stack Exhaustion Vulnerability in Autodesk 3ds Max
Assigned by autodesk
Aug 24, 2026
CVE-2026-16782Medium 5.3SVG File Parsing Out-of-Bounds Read Vulnerability in Autodesk 3ds Max
Assigned by autodesk
Aug 24, 2026
CVE-2026-16783High 7.8ABC File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max
Assigned by autodesk
Aug 24, 2026
CVE-2026-7455High 7.8FLT File Parsing Out-of-Bounds Write Vulnerability in Autodesk 3ds Max
Assigned by autodesk
Aug 24, 2026
CVE-2026-19568High 7.8SVG File Parsing Memory Corruption Vulnerability in Autodesk 3ds Max
Assigned by autodesk
Aug 24, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.