LIVE · cybersecurity feed
Live wire
cve recordhigh

CVE-2026-1289

autodesk · revit

Published
CVSS7.8
Severityhigh
WeaknessCWE-416
ExploitedNot in CISA KEV

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, disclose sensitive data, or execute arbitrary code in the context of the current process.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-1289

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-1289.