Autodesk Revit vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Autodesk Revit: 6 record(s), with affected versions and fixes.cpe:2.3:a:autodesk:revit
CVE-2026-8325
High · 7.8
CWE-787 Aug 6, 2026
Out-of-bounds Write in Autodesk Revit
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2026-7406
High · 7.8
CWE-822 Aug 6, 2026
Untrusted Pointer Dereference in Autodesk Advance Steel
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
CVE-2026-7405
Medium · 5.5
CWE-125 Aug 6, 2026
Out-of-bounds Read in Autodesk Advance Steel
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
CVE-2026-1289
High · 7.8
CWE-416 Aug 6, 2026
Use After Free in Autodesk Revit
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.
CVE-2026-11803
High · 7.8
CWE-125 Aug 6, 2026
Out-of-bounds Read in Autodesk Revit
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2026-1288
Medium · 5.5
CWE-476 Jun 17, 2026
RFA File Parsing Vulnerability in Autodesk Revit
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.