PT-2026-25703 · Dassault Systèmes+1 · Solidworks Desktop+1

Simón Marcote · Publicado 2026-03-16 · Atualizado 2026-06-08 · CVE-2026-3476

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SOLIDWORKS Desktop versions 2025 through 2026

Description A code injection issue exists in SOLIDWORKS Desktop. Successful exploitation while opening a specially crafted file could allow an attacker to execute arbitrary code on the user's machine.

Recommendations Versions prior to 2025 and after 2026 are not affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2026-3476

Produtos afetados

Solidworks Desktop

Solidworks

Referências · 5

• https://3ds.com/trust-center/security/security-advisories/cve-2026-3476 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2033583661090803813 · Publicação no Twitter
• https://3ds.com/trust-center/security/security-advisories/CVE-2026-3476 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3476 · Nota de Segurança
• https://t.me/cveNotify/166493 · Publicação no Telegram