High severity · published Aug 23, 2019
CVE-2019-7364
DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD…
7.8
CVSS
1.9%
EPSS
No
On KEV
Description
DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Advance Steel · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AU
Autocad · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AA
Autocad Architecture · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AE
Autocad Electrical · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AL
Autocad LT · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AM
Autocad Map 3d · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AM
Autocad Mechanical · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AM
Autocad Mep · Autodesk
2017; 2018; 2019; 2020 · source: NVD
AP
Autocad P&id · Autodesk
2017 · source: NVD
AP
Autocad Plant 3d · Autodesk
2017; 2018; 2019; 2020 · source: NVD
C3
Civil 3d · Autodesk
2017; 2018; 2019; 2020 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-7364
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-7364
Patch
https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002
More from Advance Steel
7.8
CVE-2026-7406
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
7.8
CVE-2026-16463
DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD
7.8
CVE-2025-8894
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability
7.8
CVE-2025-8893
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability
7.8
CVE-2025-5048
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability