Known vulnerabilities in Revit 2025

Vendor: Autodesk
Software: Revit
Version: 2025
Software CPE: cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*
Website: https://www.autodesk.com/
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Revit version 2025 Revit 2025 is affected by 18 vulnerabilities: 16 high, 2 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134763 - NULL Pointer Dereference
CVE-2026-1288		 CWE-476 Low
No
No
 2024.3.5, 2025.4.5, 2026.4.1, 2027.1 17.06.2026 SB2026061770
#VU115965 - Heap-based Buffer Overflow
CVE-2025-8894		 CWE-122 High
No
No
 2025.4.3, 2026.3 19.09.2025 SB20250919147
#VU115964 - Out-of-bounds write
CVE-2025-8893		 CWE-787 High
No
No
 2025.4.3, 2026.3 19.09.2025 SB20250919147
#VU112896 - Heap-based Buffer Overflow
CVE-2025-5040		 CWE-122 High
No
No
 2024.3.3, 2025.4.2, 2026.2 15.07.2025 SB2025071528
#VU112895 - Memory corruption
CVE-2025-5037		 CWE-119 High
No
No
 2024.3.3, 2025.4.2, 2026.2 15.07.2025 SB2025071528
#VU110072 - Use After Free
CVE-2025-5036		 CWE-416 High
No
No
 2024.3.3, 2025.4.2, 2026.1 02.06.2025 SB2025060245
#VU107492 - Out-of-bounds write
CVE-2025-1276		 CWE-787 High
No
No
 2025.1.2 16.04.2025 SB2025041640
#VU107490 - Memory corruption
CVE-2025-1277		 CWE-119 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU107488 - Heap-based Buffer Overflow
CVE-2025-1656		 CWE-122 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU107487 - Heap-based Buffer Overflow
CVE-2025-1273		 CWE-122 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU107486 - Stack-based buffer overflow
CVE-2025-2497		 CWE-121 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU107485 - Heap-based Buffer Overflow
CVE-2025-1275		 CWE-122 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU107484 - Out-of-bounds write
CVE-2025-1274		 CWE-787 High
No
No
 2025.4.1 16.04.2025 SB2025041640
#VU101908 - Heap-based Buffer Overflow
CVE-2024-11608		 CWE-122 High
No
No
 2025.4 27.12.2024 SB2024122702
#VU101907 - Uncontrolled Search Path Element
CVE-2024-11454		 CWE-427 High
No
No
 2025.4 27.12.2024 SB2024122702
#VU101906 - Out-of-bounds read
CVE-2024-11268		 CWE-125 Low
No
No
 2024.3.1, 2025.4 27.12.2024 SB2024122702
#VU98786 - Out-of-bounds write
CVE-2024-7993		 CWE-787 High
No
No
 2024.2.2, 2025.3 17.10.2024 SB2024101753
#VU98785 - Stack-based buffer overflow
CVE-2024-7994		 CWE-121 High
No
No
 2024.3, 2025.3 17.10.2024 SB2024101754