MicroStation vulnerabilities

27 known vulnerabilities in MicroStation from Bentley. 27 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  View: Use After Free

  CVE-2023-44430May 3, 2024Bentley

  Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Read

  CVE-2022-28647Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28646Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28644Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28643Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28642Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Use After Free

  CVE-2022-28641Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  View: Use of Uninitialized Variable

  CVE-2022-28320Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The

• 7.8 High severity

  MicroStation CONNECT: Use of Uninitialized Variable

  CVE-2022-28319Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28318Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Use of Uninitialized Variable

  CVE-2022-28317Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28316Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Stack-based Buffer Overflow

  CVE-2022-28315Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28314Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Read

  CVE-2022-28311Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal

• 7.8 High severity

  MicroStation CONNECT: Use After Free

  CVE-2022-28310Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal

• 7.8 High severity

  View: Out-of-bounds Read

  CVE-2022-28307Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The

• 7.8 High severity

  MicroStation CONNECT: Stack-based Buffer Overflow

  CVE-2022-28306Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal

• 7.8 High severity

  MicroStation CONNECT: Stack-based Buffer Overflow

  CVE-2022-28305Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal

• 7.8 High severity

  MicroStation CONNECT: Stack-based Buffer Overflow

  CVE-2022-28304Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal

• 7.8 High severity

  View: Use After Free

  CVE-2022-28303Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Read

  CVE-2022-28302Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation CONNECT: Out-of-bounds Write

  CVE-2022-28301Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mali

• 7.8 High severity

  MicroStation: Out-of-bounds Write

  CVE-2022-28300Mar 29, 2023Bentley

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a mal

• 7.8 High severity

  Microstation: Out-of-bounds Read

  CVE-2022-42901Oct 13, 2022Bentley

  Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01

• 7.8 High severity

  Microstation: Out-of-bounds Read

  CVE-2022-42900Oct 13, 2022Bentley

  Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58* for Micro

• 7.8 High severity

  Microstation: Out-of-bounds Read

  CVE-2022-42899Oct 13, 2022Bentley

  Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafted SKP files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.