Vulnerability · Published Mar 16, 2026 · Assigned by 3DS
CVE-2026-3476Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026
High 7.8
In plain English
A high-severity code injection in SOLIDWORKS Desktop from Dassault Systèmes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 92.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dassault Systèmes | SOLIDWORKS Desktop | Release 2025 SP0 – through Release 2025 SP5Release 2026 SP0 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H