CVE-2026-0662

7.8 highEPSS 0.2%

High (7.8) in autodesk 3ds max. EPSS 0.2% chance of exploitation in the next 30 days.

A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2026-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

autodesk:3ds_max

References

https://www.autodesk.com/products/autodesk-access/overview
https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0002

Check your stack JSON