← Back

CVE-2026-0662

nvd nist
Published: Feb 4, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.

Affected (1)

Products: Autodesk: 3ds Max
Autodesk
1 product
3ds Max
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
3ds Max
From 2026 to 2026.3.2

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (2)

Source: psirt@autodesk.com
Product
Source: psirt@autodesk.com
Vendor Advisory

Timeline

No history available yet.