Autodesk Revit vulnerabilities
5 known CVE vulnerabilities in Autodesk Revit, translated and rated.
- CVE-2026-8325High
An Out-of-Bounds Write vulnerability in Autodesk Revit when parsing a maliciously crafted PDF file. It can lead to a crash, data corruption, or arbitrary code execution in the context of the current process.
- CVE-2026-1289High
A Use-After-Free vulnerability in Autodesk Revit when parsing a maliciously crafted PDF file. It can lead to a crash, disclosure of sensitive data, or arbitrary code execution in the context of the current process.
- CVE-2026-11803High
An Out-of-Bounds Read vulnerability in Autodesk Revit when parsing a maliciously crafted PDF file. It can lead to a crash, reading sensitive data, or arbitrary code execution in the context of the current process.
- CVE-2026-1288Medium
A maliciously crafted RFA file, when converted to FormIt in Autodesk Revit, can trigger a NULL pointer dereference. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.
- CVE-2025-8354High
A maliciously crafted RFA file parsed by Autodesk Revit can trigger a type confusion vulnerability. An attacker may leverage this to cause a crash, data corruption, or execute arbitrary code in the context of the current process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

