DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.
CVE-2019-7364
CVSS base score
7.8 (v3.0)
Severity
HIGH
Attack vector
Local
Weakness
CWE-427
Last modified
November 2, 2026
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
autodesk advance steel
autodesk autocad
autodesk autocad architecture
autodesk autocad electrical
autodesk autocad lt
autodesk autocad map 3d
autodesk autocad mechanical
autodesk autocad mep
autodesk autocad p\&id
autodesk autocad plant 3d
References
- www.autodesk.com Patch, Vendor Advisory
- www.autodesk.com Patch, Vendor Advisory