CVE-2021-27038

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-09 · updated 2026-06-17
Weakness: CWE-843

Description

A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a maliciously crafted PDF file. A malicious actor can leverage this to execute arbitrary code.

Affected products

Autodesk Design Review: 2011, 2012, 2013, 2017, 2018

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Get alerted when CVE-2021-27038 or the next vulnerability affects your stack