Advisories · Technology
FreeCAD.
Every CVE that names FreeCAD among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench
- FreeCAD
- Code injection
- CVSS 7.8 High
FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page
- FreeCAD
- Code injection
- CVSS 7.0 High
FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore
- FreeCAD
- Code injection
- CVSS 6.1 Medium
FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parser
- FreeCAD
- XML external entities (XXE)
- CVSS 7.8 High
FreeCAD: FCStd path traversal allows arbitrary file write via unsanitized file attribute in PropertyFileIncluded::Restore()
- FreeCAD
- Path traversal
- CVSS 8.5 High
FreeCAD: FEM formula incomplete escape
- FreeCAD
- Code injection