Skip to content
OpenAdvisories
High · 7.8 CVE-2026-3476 EUVD-2026-12419GHSA-j9c7-7rgx-jhf8

Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026

Published Mar 16, 2026 · Updated Mar 17, 2026 · Assigned by 3DS

Description

A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.

Affected products

VendorProductAffectedFixed
Dassault Systèmes SOLIDWORKS Desktop Release 2025 SP0 – ≤ Release 2025 SP5, Release 2026 SP0 —

References