vulnerability

AutoDesk AutoCAD: CVE-2022-40674: expat/libcurl/SQLite/Zlib

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Jun 23, 2023
Added
Jul 22, 2025
Modified
Jul 22, 2025

Description

Autodesk products leveraging internal components, Autodesk Material Management, and those implicitly importing vulnerable versions expat and libcurl may be impacted by Out-of-bound Write, User-After-Free, Information Disclosure, Improper Input Validation, Business Logic Errors, location of Resources Without Limits or Throttling, Denial of Service, SSRF, Insufficiently Protected Credentials, and Improper Authentication - Generic vulnerabilities.

Solution

autodesk-autocad-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.