7.8Hoch
CVE-2026-3476Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026
Beschreibung
A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.
Schwachstellentyp (CWE):
CWE-94
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| 3ds | solidworks | 2025 – < 2026 | |
| Dassault Systèmes | SOLIDWORKS Desktop | Release 2025 SP0 – ≤ Release 2025 SP5, Release 2026 SP0 |
Referenzen und Patches
CPE-Treffer (NVD) (2)
cpe:2.3:a:3ds:solidworks:*:*:*:*:*:*:*:*≥ 2025 < 2026cpe:2.3:a:3ds:solidworks:2026:sp0:*:*:*:*:*:*