Known vulnerabilities in Revit 2026

Vendor: Autodesk
Software: Revit
Version: 2026
Software CPE: cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*
Website: https://www.autodesk.com/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Revit version 2026 Revit 2026 is affected by 17 vulnerabilities: 14 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134763 - NULL Pointer Dereference
CVE-2026-1288		 CWE-476 Low
No
No
 2024.3.5, 2025.4.5, 2026.4.1, 2027.1 17.06.2026 SB2026061770
#VU116063 - Type confusion
CVE-2025-8354		 CWE-843 High
No
No
 2026.3 24.09.2025 SB2025092407
#VU115965 - Heap-based Buffer Overflow
CVE-2025-8894		 CWE-122 High
No
No
 2025.4.3, 2026.3 19.09.2025 SB20250919147
#VU115964 - Out-of-bounds write
CVE-2025-8893		 CWE-787 High
No
No
 2025.4.3, 2026.3 19.09.2025 SB20250919147
#VU113728 - Out-of-bounds write
CVE-2025-7675		 CWE-787 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113727 - Out-of-bounds write
CVE-2025-7497		 CWE-787 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113726 - Out-of-bounds write
CVE-2025-6637		 CWE-787 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113725 - Use After Free
CVE-2025-6636		 CWE-416 High
No
No
 2026.3 07.08.2025 SB2025080701
#VU113724 - Out-of-bounds read
CVE-2025-6635		 CWE-125 Medium
No
No
 2026.3 06.08.2025 SB2025080701
#VU113723 - Out-of-bounds write
CVE-2025-6631		 CWE-787 High
No
No
 2026.3 06.08.2025 SB2025080701
#VU113722 - Heap-based Buffer Overflow
CVE-2025-5043		 CWE-122 High
No
No
 2026.3 06.08.2025 SB2025080701
#VU113721 - Memory corruption
CVE-2025-5038		 CWE-119 High
No
No
 2026.3 06.08.2025 SB2025080701
#VU113358 - Untrusted Search Path
CVE-2025-5039		 CWE-426 High
No
No
 2026.0.2 28.07.2025 SB2025072865
#VU113171 - Out-of-bounds read
CVE-2025-5042		 CWE-125 Medium
No
No
 2026.2 23.07.2025 SB2025072324
#VU112896 - Heap-based Buffer Overflow
CVE-2025-5040		 CWE-122 High
No
No
 2024.3.3, 2025.4.2, 2026.2 15.07.2025 SB2025071528
#VU112895 - Memory corruption
CVE-2025-5037		 CWE-119 High
No
No
 2024.3.3, 2025.4.2, 2026.2 15.07.2025 SB2025071528
#VU110072 - Use After Free
CVE-2025-5036		 CWE-416 High
No
No
 2024.3.3, 2025.4.2, 2026.1 02.06.2025 SB2025060245