Known vulnerabilities in Revit

Vendor: Autodesk
Software: Revit
Software CPE: cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*
Website: https://www.autodesk.com/
Total vulnerabilities: 36
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Revit Revit is affected by 36 known vulnerabilities: 31 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134763 - NULL Pointer Dereference
CVE-2026-1288		 CWE-476 Low
No
No
 2024.3.5, 2025.4.5, 2026.4.1, 2027.1 17.06.2026 SB2026061770
#VU116063 - Type confusion
CVE-2025-8354		 CWE-843 High
No
No
 2026.3 24.09.2025 SB2025092407
#VU115965 - Heap-based Buffer Overflow
CVE-2025-8894		 CWE-122 High
No
No
 2025.4.3, 2026.3 19.09.2025 SB20250919147
#VU115964 - Out-of-bounds write
CVE-2025-8893		 CWE-787 High
No
No
 2025.4.3, 2026.3 19.09.2025 SB20250919147
#VU113728 - Out-of-bounds write
CVE-2025-7675		 CWE-787 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113727 - Out-of-bounds write
CVE-2025-7497		 CWE-787 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113726 - Out-of-bounds write
CVE-2025-6637		 CWE-787 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113725 - Use After Free
CVE-2025-6636		 CWE-416 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113724 - Out-of-bounds read
CVE-2025-6635		 CWE-125 Medium
No
No
 2026.3 06.08.2025 SB2025080701
#VU113723 - Out-of-bounds write
CVE-2025-6631		 CWE-787 High
No
No
 2026.3 06.08.2025 SB2025080701
#VU113722 - Heap-based Buffer Overflow
CVE-2025-5043		 CWE-122 High
No
No
 2026.3 06.08.2025 SB2025080701
#VU113721 - Memory corruption
CVE-2025-5038		 CWE-119 High
No
No
 2026.3 06.08.2025 SB2025080701
#VU113358 - Untrusted Search Path
CVE-2025-5039		 CWE-426 High
No
No
 2026.0.2 28.07.2025 SB2025072865
#VU113171 - Out-of-bounds read
CVE-2025-5042		 CWE-125 Medium
No
No
 2026.2 23.07.2025 SB2025072324
#VU112896 - Heap-based Buffer Overflow
CVE-2025-5040		 CWE-122 High
No
No
 2024.3.3, 2025.4.2, 2026.2 15.07.2025 SB2025071528
#VU112895 - Memory corruption
CVE-2025-5037		 CWE-119 High
No
No
 2024.3.3, 2025.4.2, 2026.2 15.07.2025 SB2025071528
#VU110072 - Use After Free
CVE-2025-5036		 CWE-416 High
No
No
 2024.3.3, 2025.4.2, 2026.1 02.06.2025 SB2025060245
#VU107487 - Heap-based Buffer Overflow
CVE-2025-1273		 CWE-122 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU107486 - Stack-based buffer overflow
CVE-2025-2497		 CWE-121 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU107485 - Heap-based Buffer Overflow
CVE-2025-1275		 CWE-122 High
No
No
 2025.4.1 16.04.2025 SB2025041640


Showing elements 1 - 20 out of 36