CVE-2024-11454: high-severity vulnerability in Autodesk Revit
Untrusted Search Path vulnerability in Autodesk Revit
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.2%
A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Autodesk · RevitRelated CVEs — Autodesk Revit
In the same product, most dangerous first.
CVE-2025-5037HIGHRFA File Parsing Memory Corruption VulnerabilityEPSS 0.4%CVE-2025-1275HIGHJPG File Parsing Heap-Based Overflow VulnerabilityEPSS 0.4%CVE-2025-2497HIGHDWG File Parsing Stack-Based Buffer VulnerabilityEPSS 0.3%CVE-2025-1277HIGHPDF File Parsing Memory Corruption VulnerabilityEPSS 0.3%CVE-2025-1656HIGHPDF File Parsing Heap-based Overflow VulnerabilityEPSS 0.3%CVE-2024-37008HIGHStack-based Overflow Vulnerability in Revit SoftwareEPSS 0.2%