What’s Vulnerable › Vulnerabilities

CVE-2019-7364

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-08-23 · updated 2026-06-17
• Weakness: CWE-427

Description

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.

Affected products

• Autodesk Advance Steel: 2017, 2018, 2019, 2020
• Autodesk AutoCAD: 2017, 2018, 2019, 2020
• Autodesk AutoCAD Architecture: 2017, 2018, 2019, 2020
• Autodesk AutoCAD Electrical: 2017, 2018, 2019, 2020
• Autodesk AutoCAD LT: 2017, 2018, 2019, 2020
• Autodesk AutoCAD MAP 3D: 2017, 2018, 2019, 2020
• Autodesk AutoCAD Mechanical: 2017, 2018, 2019, 2020
• Autodesk AutoCAD MEP: 2017, 2018, 2019, 2020
• Autodesk Autocad P&Id: 2017
• Autodesk AutoCAD Plant 3D: 2017, 2018, 2019, 2020
• Autodesk Civil 3D: 2017, 2018, 2019, 2020

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002

Get alerted when CVE-2019-7364 or the next vulnerability affects your stack