CVE-2026-11803

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-11803", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2026-06-09T15:00:58.771Z", "datePublished": "2026-08-06T15:58:36.195Z", "dateUpdated": "2026-10-19T12:23:33.438Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2026-10-19T12:23:33.438Z"}, "title": "PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125 Out-of-Bounds Read", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-540", "descriptions": [{"lang": "en", "value": "CAPEC-540 Overread Buffers"}]}], "affected": [{"vendor": "Autodesk", "product": "Revit", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.2.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.5.0", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.4.6", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.3.6", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"]}, {"vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"]}, {"vendor": "Autodesk", "product": "AutoCAD LT", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"]}, {"vendor": "Autodesk", "product": "DWG TrueView", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}]}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011", "tags": ["vendor-advisory"]}, {"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-07T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-11803"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-08T03:55:29.449Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-11803", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-07T15:25:43.621518Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T15:27:54.297Z"}}], "cna": {"title": "PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-540", "descriptions": [{"lang": "en", "value": "CAPEC-540 Overread Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Revit", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.2.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.5.0", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.4.6", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.3.6", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD LT", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "DWG TrueView", "versions": [{"status": "affected", "version": "2027.0.0", "lessThan": "2027.1.0", "versionType": "semver"}, {"status": "affected", "version": "2026.0.0", "lessThan": "2026.1.2", "versionType": "semver"}, {"status": "affected", "version": "2025.0.0", "lessThan": "2025.1.4", "versionType": "semver"}, {"status": "affected", "version": "2024.0.0", "lessThan": "2024.1.9", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011", "tags": ["vendor-advisory"]}, {"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-Bounds Read"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2026-10-19T12:23:33.438Z"}}}, "cveMetadata": {"cveId": "CVE-2026-11803", "state": "PUBLISHED", "dateUpdated": "2026-10-19T12:23:33.438Z", "dateReserved": "2026-06-09T15:00:58.771Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2026-08-06T15:58:36.195Z", "assignerShortName": "autodesk"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:autodesk:revit:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:revit:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Revit", "vendor": "Autodesk", "versions": [{"lessThan": "2027.2.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.5.0", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.4.6", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.3.6", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:autodesk:autocad:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD", "vendor": "Autodesk", "versions": [{"lessThan": "2027.1.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.1.2", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.1.4", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.1.9", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:autodesk:autocad_lt:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD LT", "vendor": "Autodesk", "versions": [{"lessThan": "2027.1.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.1.2", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.1.4", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.1.9", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}, {"cpes": ["cpe:2.3:a:autodesk:dwg_trueview:2027:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2026:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "DWG TrueView", "vendor": "Autodesk", "versions": [{"lessThan": "2027.1.0", "status": "affected", "version": "2027.0.0", "versionType": "semver"}, {"lessThan": "2026.1.2", "status": "affected", "version": "2026.0.0", "versionType": "semver"}, {"lessThan": "2025.1.4", "status": "affected", "version": "2025.0.0", "versionType": "semver"}, {"lessThan": "2024.1.9", "status": "affected", "version": "2024.0.0", "versionType": "semver"}]}], "source": "psirt@autodesk.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "4ADB4CB5-ABEE-4207-9CE0-AA3FFA82B502", "versionEndExcluding": "2024.3.6", "versionStartIncluding": "2024", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A7544FC-BE0C-4A36-A5D9-1E96398038A7", "versionEndExcluding": "2025.4.6", "versionStartIncluding": "2025", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D3A12A9-E8C2-4D85-B7C7-9392F2DFCA83", "versionEndExcluding": "2026.5", "versionStartIncluding": "2026", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*", "matchCriteriaId": "9136E308-DC53-429E-B4C3-0BA4F16ED9D1", "versionEndExcluding": "2027.2", "versionStartIncluding": "2027", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Un archivo PDF creado maliciosamente, cuando es analizado por Autodesk Revit, puede forzar una vulnerabilidad de lectura fuera de l\u00edmites. Un actor malicioso puede aprovechar esta vulnerabilidad para causar un fallo, leer datos sensibles o ejecutar c\u00f3digo arbitrario en el contexto del proceso actual."}], "id": "CVE-2026-11803", "lastModified": "2026-10-23T21:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "psirt@autodesk.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11803", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-07T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-08-06T22:16:44.967", "references": [{"source": "psirt@autodesk.com", "tags": ["Product"], "url": "https://www.autodesk.com/products/autodesk-access/overview"}, {"source": "psirt@autodesk.com", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2026-0011"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "psirt@autodesk.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2027.0.0,2027.2.0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2026.0.0,2026.5.0)"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Revit", "source": "cna", "vendor": "Autodesk"}, "product": "revit", "vendor": "autodesk"}], "created": "2026-08-06T23:30:05.254239+00:00", "updated": "2026-10-19T13:45:05.118279+00:00", "vendors": ["autodesk", "autodesk$PRODUCT$revit"]}