CVE-2026-3476 — Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026

CVE-2026-3476

Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 PUBLISHED

Description (CNA)

A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / SOLIDWORKS Desktop	affected Release 2025 SP0 through Release 2025 SP5; affected Release 2026 SP0

CWE

CWE-94

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-3476

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.