7.8Yüksek
CVE-2026-3476Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026
Açıklama
A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.
Zayıflık türü (CWE):
CWE-94
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| 3ds | solidworks | 2025 – < 2026 | |
| Dassault Systèmes | SOLIDWORKS Desktop | Release 2025 SP0 – ≤ Release 2025 SP5, Release 2026 SP0 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:3ds:solidworks:*:*:*:*:*:*:*:*≥ 2025 < 2026cpe:2.3:a:3ds:solidworks:2026:sp0:*:*:*:*:*:*