Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
Autodesk Fusion desktop app allows malicious code to run on user's machine
CVE-2026-4344
Summary
A flaw in the Autodesk Fusion desktop application could allow a malicious actor to execute code on your computer if a user clicks on a specially crafted link or file name while viewing a delete confirmation dialog. This could lead to unauthorized access to local files or the execution of malicious code. To protect your system, update the Autodesk Fusion application to the latest version available.
Original title
A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in ...
Original description
A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
nvd CVSS3.1
7.1
Vulnerability type
CWE-79
Cross-site Scripting (XSS)
Published: 14 Apr 2026 · Updated: 14 Apr 2026 · First seen: 14 Apr 2026