CVE-2019-7364: Autodesk Advance Steel

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.

Affected products

• Autodesk Advance Steel: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad Architecture: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad Electrical: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad Lt: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad Map 3d: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad Mechanical: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad Mep: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Autocad P&id: version 2017 only
• Autodesk Autocad Plant 3d: version 2017 only; version 2018 only; version 2019 only; version 2020 only
• Autodesk Civil 3d: version 2017 only; version 2018 only; version 2019 only; version 2020 only

Published 2019-08-23. Last modified 2026-06-17.