208 matches found
Autodesk Revit 2024 < 2024.3.5 / 2025 < 2025.4.5 / 2026 < 2026.4.1 / 2027 < 2027.1 DoS (adsk-sa-2026-0007)
The version of Autodesk Revit installed on the remote host is 2024 prior to 2024.3.5, 2025 prior to 2025.4.5, 2026 prior to 2026.4.1, or 2027 prior to 2027.1. It is, therefore, affected by a denial of service vulnerability: - A maliciously crafted RFA file, when converted to FormIt via 'Convert R...
CVE-2026-1288
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition...
CVE-2026-1288 RFA File Parsing Vulnerability in Autodesk Revit
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition...
CVE-2026-1288 RFA File Parsing Vulnerability in Autodesk Revit
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition...
EUVD-2026-37744
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition...
PT-2026-50458
Name of the Vulnerable Software and Affected Versions Autodesk Revit affected versions not specified Description A NULL Pointer Dereference occurs when the application attempts to read a memory address that is NULL, typically resulting in a crash. This issue is triggered when a maliciously crafte...
CVE-2026-1288: NULL Pointer Dereference
A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition...
Autodesk Revit 2023.x < 2023.1.7 / 2024.x < 2024.3.2 / 2025.x < 2025.4.1
The version of Autodesk Revit installed on the remote host is prior to 2023.1.7 / 2024.3.2 / 2025.4.1. It is, therefore, affected by a remote code execution vulnerability as referenced in ADSK-SA-2025-0007. - A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an...
MAL-2025-191585 Malicious code in revit-to-ifc-scheduler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27f38ca3d7137e9a86fceda4b0315a4cd618118bcbcbc1b17aec59d089d66e7 The package revit-to-ifc-scheduler was found to contain malicious code...
Malicious code in revit-to-ifc-scheduler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27f38ca3d7137e9a86fceda4b0315a4cd618118bcbcbc1b17aec59d089d66e7 The package revit-to-ifc-scheduler was found to contain malicious code...
Autodesk Revit Code Execution
The vulnerability of Autodesk Revit software for building information modeling involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current process using a specially created RFA...
A Cascade of Insecure Architectures: Axis Plugin Design Flaw Expose Select Autodesk Revit Users to Supply Chain Risk
We discovered Azure Storage Account credentials exposed in Axis Communications’ Autodesk Revit plugin, allowing unauthorized modification of cloud-hosted files. This exposure, combined with vulnerabilities in Autodesk Revit, could enable supply-chain attacks targeting end users...
EUVD-2008-4452
Malware in sbrugna...
EUVD-2024-48824
Malicious code in bioql PyPI...
EUVD-2025-30888
Malicious code in bioql PyPI...
EUVD-2025-16683
Malicious code in bioql PyPI...
EUVD-2024-48823
Malicious code in bioql PyPI...
EUVD-2024-34393
Malicious code in bioql PyPI...