CVE-2024-11454

7.8 highEPSS 0.2%

High (7.8) in autodesk revit. EPSS 0.2% chance of exploitation in the next 30 days.

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2024-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

autodesk:revit

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0025

Check your stack JSON