VULNERABILITY INTELLIGENCE

CVE-2022-25796

CVSS score7.8 HIGH

EPSS probability1.11%

CISA KEVNot currently listed

Published2022-04-11

Last modified2026-06-17

Description

A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.