7.8High
CVE-2026-3476Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026
Description
A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.
Weakness (CWE):
CWE-94
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| 3ds | solidworks | 2025 – < 2026 | |
| Dassault Systèmes | SOLIDWORKS Desktop | Release 2025 SP0 – ≤ Release 2025 SP5, Release 2026 SP0 |
References and patches
CPE matches (NVD) (2)
cpe:2.3:a:3ds:solidworks:*:*:*:*:*:*:*:*≥ 2025 < 2026cpe:2.3:a:3ds:solidworks:2026:sp0:*:*:*:*:*:*