2 lines
5.3 KiB
JSON
2 lines
5.3 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"Revit","vendor":"Autodesk","versions":[{"lessThan":"2027.2.0","status":"affected","version":"2027.0.0","versionType":"semver"},{"lessThan":"2026.5.0","status":"affected","version":"2026.0.0","versionType":"semver"},{"lessThan":"2025.4.6","status":"affected","version":"2025.0.0","versionType":"semver"},{"lessThan":"2024.3.6","status":"affected","version":"2024.0.0","versionType":"semver"}]},{"cpes":["cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"AutoCAD","vendor":"Autodesk","versions":[{"lessThan":"2027.1.0","status":"affected","version":"2027.0.0","versionType":"semver"},{"lessThan":"2026.1.2","status":"affected","version":"2026.0.0","versionType":"semver"},{"lessThan":"2025.1.4","status":"affected","version":"2025.0.0","versionType":"semver"},{"lessThan":"2024.1.9","status":"affected","version":"2024.0.0","versionType":"semver"}]},{"cpes":["cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"AutoCAD LT","vendor":"Autodesk","versions":[{"lessThan":"2027.1.0","status":"affected","version":"2027.0.0","versionType":"semver"},{"lessThan":"2026.1.2","status":"affected","version":"2026.0.0","versionType":"semver"},{"lessThan":"2025.1.4","status":"affected","version":"2025.0.0","versionType":"semver"},{"lessThan":"2024.1.9","status":"affected","version":"2024.0.0","versionType":"semver"}]},{"cpes":["cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*","cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"DWG TrueView","vendor":"Autodesk","versions":[{"lessThan":"2027.1.0","status":"affected","version":"2027.0.0","versionType":"semver"},{"lessThan":"2026.1.2","status":"affected","version":"2026.0.0","versionType":"semver"},{"lessThan":"2025.1.4","status":"affected","version":"2025.0.0","versionType":"semver"},{"lessThan":"2024.1.9","status":"affected","version":"2024.0.0","versionType":"semver"}]}],"source":"psirt@autodesk.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*","matchCriteriaId":"4ADB4CB5-ABEE-4207-9CE0-AA3FFA82B502","versionEndExcluding":"2024.3.6","versionStartIncluding":"2024","vulnerable":true},{"criteria":"cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*","matchCriteriaId":"6A7544FC-BE0C-4A36-A5D9-1E96398038A7","versionEndExcluding":"2025.4.6","versionStartIncluding":"2025","vulnerable":true},{"criteria":"cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*","matchCriteriaId":"4D3A12A9-E8C2-4D85-B7C7-9392F2DFCA83","versionEndExcluding":"2026.5","versionStartIncluding":"2026","vulnerable":true},{"criteria":"cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*","matchCriteriaId":"9136E308-DC53-429E-B4C3-0BA4F16ED9D1","versionEndExcluding":"2027.2","versionStartIncluding":"2027","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process."},{"lang":"es","value":"Un archivo PDF creado maliciosamente, cuando es analizado por Autodesk Revit, puede forzar una vulnerabilidad de uso después de liberación. Un actor malicioso puede aprovechar esta vulnerabilidad para causar un fallo, divulgar datos sensibles o ejecutar código arbitrario en el contexto del proceso actual."}],"id":"CVE-2026-1289","lastModified":"2026-10-23T21:10:00.157","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"psirt@autodesk.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1289","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-08-07T00:00:00+00:00","version":"2.0.3"}}]},"published":"2026-08-06T22:17:00.373","references":[{"source":"psirt@autodesk.com","tags":["Product"],"url":"https://www.autodesk.com/products/autodesk-access/overview"},{"source":"psirt@autodesk.com","tags":["Vendor Advisory"],"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011"}],"sourceIdentifier":"psirt@autodesk.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"psirt@autodesk.com","type":"Secondary"}]}
|