CVE-2024-11454

—

CVSS 3.1

7.8 high

EPSS

<1%p9

Published

Dec 9, 2024 (Dec 9, 2024)

Modified

Jun 17, 2026

Description

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.

Vendors: autodesk
Products: revit
Weakness: CWE-426
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.