Revit
Autodesk- Product type
- Software application
- Catalog vulnerabilities
- 40
Severity across 25 analyzed records
en
Severity across 25 analyzed records
Verify to analyze this security profile
As of 09/13/2026, within CyStack's analyzed data, Revit has 6 security vulnerabilities published in the last 90 days. Of these, 4 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Revit and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-7406BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products | Exploitation statusNot known exploited | FixYes | Published08/06/2026 | SeverityHigh |
CVE-2026-7405TIF File Parsing Out-of-Bounds Read in certain Autodesk products | Exploitation statusNot known exploited | FixYes | Published08/06/2026 | SeverityMedium |
CVE-2026-11803PDF File Parsing Out-of-Bounds Read Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published08/06/2026 | SeverityHigh |
CVE-2026-8325PDF File Parsing Out-of-Bounds Write Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published08/06/2026 | SeverityHigh |
CVE-2026-1289PDF File Parsing Use-After-Free Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published08/06/2026 | SeverityHigh |
CVE-2026-1288RFA File Parsing Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published06/17/2026 | SeverityMedium |
CVE-2025-8354RFA File Parsing Type Confusion Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/23/2025 | SeverityHigh |
CVE-2025-8894PDF File Parsing Heap-Based Buffer Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/16/2025 | SeverityHigh |
CVE-2025-8893PDF File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/16/2025 | SeverityHigh |
CVE-2025-5039Privilege Ecalation due to Untrusted Search Path Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/24/2025 | SeverityHigh |
CVE-2025-5042RFA File Parsing Out-of-Bounds Read Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/22/2025 | SeverityHigh |
CVE-2025-5040RTE File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/10/2025 | SeverityHigh |
CVE-2025-5037RFA File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/10/2025 | SeverityHigh |
CVE-2025-5036RFA File Parsing Use-After-Free Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/02/2025 | SeverityHigh |
CVE-2025-1274RCS File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/15/2025 | SeverityHigh |
CVE-2025-1277PDF File Parsing Memory Corruption Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/15/2025 | SeverityHigh |
CVE-2025-1656PDF File Parsing Heap-based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/15/2025 | SeverityHigh |
CVE-2025-1273PDF File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/15/2025 | SeverityHigh |
CVE-2025-2497DWG File Parsing Stack-Based Buffer Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/15/2025 | SeverityHigh |
CVE-2025-1276DWG File Parsing Out-of-Bounds Write Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/15/2025 | SeverityHigh |
CVE-2025-1275JPG File Parsing Heap-Based Overflow Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/15/2025 | SeverityHigh |
CVE-2024-11608 | Exploitation statusNot known exploited | FixYes | Published12/09/2024 | SeverityHigh |
CVE-2024-11454Untrusted Search Path vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published12/09/2024 | SeverityHigh |
CVE-2024-11268PDF File Parsing Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published12/09/2024 | SeverityMedium |
CVE-2024-7994Stack-Based Buffer Overflow Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published10/16/2024 | SeverityHigh |
CVE-2024-7993Out-of-Bounds Write Vulnerability in Autodesk Revit | Exploitation statusNot known exploited | FixYes | Published10/16/2024 | SeverityHigh |
CVE-2024-37008Stack-based Overflow Vulnerability in Revit Software | Exploitation statusNot known exploited | FixYes | Published08/21/2024 | SeverityHigh |
CVE-2023-25004 | Exploitation statusNot known exploited | FixNot confirmed | Published06/27/2023 | SeverityUnknown |
CVE-2023-25002 | Exploitation statusNot known exploited | FixNot confirmed | Published06/27/2023 | SeverityUnknown |
CVE-2023-29068 | Exploitation statusNot known exploited | FixNot confirmed | Published06/27/2023 | SeverityUnknown |
CVE-2023-25003 | Exploitation statusNot known exploited | FixNot confirmed | Published06/23/2023 | SeverityUnknown |
CVE-2021-40165 | Exploitation statusNot confirmed | FixNot confirmed | Published10/07/2022 | SeverityUnknown |
CVE-2021-40166 | Exploitation statusNot confirmed | FixNot confirmed | Published10/07/2022 | SeverityUnknown |
CVE-2021-40163 | Exploitation statusNot confirmed | FixNot confirmed | Published10/07/2022 | SeverityUnknown |
CVE-2021-40162 | Exploitation statusNot confirmed | FixNot confirmed | Published10/07/2022 | SeverityUnknown |
CVE-2021-40164 | Exploitation statusNot confirmed | FixNot confirmed | Published10/07/2022 | SeverityUnknown |
CVE-2022-27871 | Exploitation statusNot confirmed | FixNot confirmed | Published06/21/2022 | SeverityUnknown |
CVE-2021-40161 | Exploitation statusNot confirmed | FixNot confirmed | Published12/23/2021 | SeverityUnknown |
CVE-2021-40160 | Exploitation statusNot confirmed | FixNot confirmed | Published12/23/2021 | SeverityUnknown |
CVE-2005-4710 | Exploitation statusNot confirmed | FixNot confirmed | Published02/10/2006 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan