CVE-2022-25796

7.8 highEPSS 1.1%

High (7.8) in autodesk navisworks. EPSS 1.1% chance of exploitation in the next 30 days.

A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-415
Published: 2022-04-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

autodesk:navisworks

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005

Check your stack JSON