Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:revit:2023:*:*:*:*:*:*:*

part: a version: 2023 update: *

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductRevit (16e922ad-c794-52c1-9341-8ec8318d5489)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5042 vulnerable 2026-06-08 07:35:23.988441 RFA File Parsing Out-of-Bounds Read Vulnerability
HIGH (7.8)
A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Published: 2025-07-22T16:02:51.214Z
Updated: 2026-02-26T17:50:25.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5040 vulnerable 2026-06-08 07:35:23.987881 RTE File Parsing Heap-Based Overflow Vulnerability
HIGH (7.8)
A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Published: 2025-07-10T11:31:19.454Z
Updated: 2026-02-26T17:50:48.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5037 vulnerable 2026-06-08 07:35:23.961916 RFA File Parsing Memory Corruption Vulnerability
HIGH (7.8)
A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Published: 2025-07-10T11:30:47.004Z
Updated: 2026-02-26T17:50:48.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5036 vulnerable 2026-06-08 07:35:23.959845 RFA File Parsing Use-After-Free Vulnerability
HIGH (7.8)
A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Published: 2025-06-02T16:55:54.002Z
Updated: 2026-02-26T18:27:42.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1656 vulnerable 2026-06-08 07:08:37.510867 PDF File Parsing Heap-based Overflow Vulnerability
HIGH (7.8)
A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Published: 2025-04-15T20:56:30.567Z
Updated: 2026-02-26T18:28:16.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1277 vulnerable 2026-06-08 07:08:36.200966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1275 vulnerable 2026-06-08 07:08:36.111375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1274 vulnerable 2026-06-08 07:08:36.108273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1273 vulnerable 2026-06-08 07:08:36.063387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7994 vulnerable 2026-06-08 06:58:24.079476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37008 vulnerable 2026-06-08 06:39:46.168019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11608 vulnerable 2026-06-08 06:23:49.954357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25002 vulnerable 2026-06-08 05:56:08.323274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.