CVE-2019-7364
highDLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD El…
Vendor / product: Autodesk — advance steel
DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
CVSS
7.8
7.8 (CVSS v3.0)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.0 (nvd@nist.gov)
Timeline (UTC)
Published: 2019-08-23 20:15
Modified: 2026-11-02 18:18
NVD status: Modified
Last synced 1 day ago
Verified against the source API 2026-11-03 07:33 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
autodesk / advance_steel 2017, 2018, 2019, 2020
autodesk / autocad 2017, 2018, 2019, 2020
autodesk / autocad_architecture 2017, 2018, 2019, 2020
autodesk / autocad_electrical 2017, 2018, 2019, 2020
autodesk / autocad_lt 2017, 2018, 2019, 2020
autodesk / autocad_map_3d 2017, 2018, 2019, 2020
autodesk / autocad_mechanical 2017, 2018, 2019, 2020
autodesk / autocad_mep 2017, 2018, 2019, 2020
autodesk / autocad_p\&id 2017
autodesk / autocad_plant_3d 2017, 2018, 2019, 2020
autodesk / civil_3d 2017, 2018, 2019, 2020
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002
Vendor advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002
Patch / mitigation: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002
Patch / mitigation: https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 psirt@autodesk.com
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-03 07:33 UTC · record ↗