Out-of-Bounds Read Vulnerability in Autodesk Revit
CVE-2026-11803

7.8HIGH

Key Information:

Vendor

Autodesk
Status
Revit
Vendor
CVE Published:
6 August 2026

What is CVE-2026-11803?

A vulnerability exists in Autodesk Revit where a specially crafted PDF file, when processed, can lead to an Out-of-Bounds Read. An attacker can exploit this flaw to trigger application crashes, access sensitive data, or even execute arbitrary code under the current user’s environment. It is essential for users to remain vigilant and ensure their software is up to date to protect against these potential threats.

Affected Version(s)

Revit 2027.0.0 < 2027.2.0

Revit 2026.0.0 < 2026.5.0

References

https://www.autodesk.com/trust/security-advisories/adsk-s...
vendor-advisory
https://www.autodesk.com/products/autodesk-access/overview
patch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.