CVE-2026-3476

Published: Mar 16, 2026Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 3DS.Information-Security@3ds.com (Secondary)

Description

A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.

Affected (2)

Products: 3ds: Solidworks

3ds

1 product

Solidworks

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
3ds Solidworks	From 2025 to 2026
3ds Solidworks	Version 2026 sp0

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (1)

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-3476

Source: 3DS.Information-Security@3ds.com

Vendor Advisory

Timeline

No history available yet.