CVE-2022-27864

8.8 highEPSS 1.2%

High (8.8) in autodesk design review. EPSS 1.2% chance of exploitation in the next 30 days.

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-415
Published: 2022-07-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

autodesk:design_review

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009

Check your stack JSON