CVE-2026-1335

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1335", "assignerOrgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "state": "PUBLISHED", "assignerShortName": "3DS", "dateReserved": "2026-01-22T08:11:00.363Z", "datePublished": "2026-02-16T13:36:50.914Z", "dateUpdated": "2026-02-26T14:44:19.860Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "shortName": "3DS", "dateUpdated": "2026-02-16T13:36:50.914Z"}, "title": "Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write", "type": "CWE"}]}], "affected": [{"vendor": "Dassault Syst\u00e8mes", "product": "SOLIDWORKS eDrawings", "versions": [{"status": "affected", "version": "Release SOLIDWORKS Desktop 2025 SP0", "lessThanOrEqual": "Release SOLIDWORKS Desktop 2025 SP5", "versionType": "custom"}, {"status": "affected", "version": "Release SOLIDWORKS Desktop 2026 SP0"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."}]}], "references": [{"url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1335"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1335", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-18T04:56:23.913446Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T14:44:19.860Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1335", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-18T04:56:23.913446Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-17T14:55:14.976Z"}}], "cna": {"title": "Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Dassault Syst\u00e8mes", "product": "SOLIDWORKS eDrawings", "versions": [{"status": "affected", "version": "Release SOLIDWORKS Desktop 2025 SP0", "versionType": "custom", "lessThanOrEqual": "Release SOLIDWORKS Desktop 2025 SP5"}, {"status": "affected", "version": "Release SOLIDWORKS Desktop 2026 SP0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1335"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.", "supportingMedia": [{"type": "text/html", "value": "An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "shortName": "3DS", "dateUpdated": "2026-02-16T13:36:50.914Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1335", "state": "PUBLISHED", "dateUpdated": "2026-02-26T14:44:19.860Z", "dateReserved": "2026-01-22T08:11:00.363Z", "assignerOrgId": "f5a594e6-46a7-4e60-8a08-0a786e70e433", "datePublished": "2026-02-16T13:36:50.914Z", "assignerShortName": "3DS"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SOLIDWORKS eDrawings", "vendor": "Dassault Syst\u00e8mes", "versions": [{"lessThanOrEqual": "Release SOLIDWORKS Desktop 2025 SP5", "status": "affected", "version": "Release SOLIDWORKS Desktop 2025 SP0", "versionType": "custom"}, {"status": "affected", "version": "Release SOLIDWORKS Desktop 2026 SP0"}]}], "source": "3DS.Information-Security@3ds.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2025:-:*:*:*:*:*:*", "matchCriteriaId": "3BFD2148-C6C4-4CF2-9F55-B2CA6718764E", "vulnerable": true}, {"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp1.0:*:*:*:*:*:*", "matchCriteriaId": "D287DF59-F58D-4E20-94CE-AC215210869E", "vulnerable": true}, {"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp2.0:*:*:*:*:*:*", "matchCriteriaId": "7AEE42D4-395E-4123-A6C3-6FB629E04DE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp3.0:*:*:*:*:*:*", "matchCriteriaId": "A83323FC-7F94-474C-A88D-9D7EBD2245CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp4.0:*:*:*:*:*:*", "matchCriteriaId": "78B93E6F-8D54-48E7-9316-BCCCE84CC4BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2025:sp5.0:*:*:*:*:*:*", "matchCriteriaId": "41D92A14-FC5A-458D-9905-96ED8B1AF37F", "vulnerable": true}, {"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2026:-:*:*:*:*:*:*", "matchCriteriaId": "D757A6BA-3930-429F-9A74-9CEA0A38BFDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:3ds:solidworks_edrawings:2026:sp1.1:*:*:*:*:*:*", "matchCriteriaId": "593E69C3-57C6-498E-ABB8-4DA5C511E500", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."}, {"lang": "es", "value": "Una vulnerabilidad de escritura fuera de l\u00edmites que afecta al procedimiento de lectura de archivos EPRT en SOLIDWORKS eDrawings desde la versi\u00f3n SOLIDWORKS Desktop 2025 hasta la versi\u00f3n SOLIDWORKS Desktop 2026 podr\u00eda permitir a un atacante ejecutar c\u00f3digo arbitrario al abrir un archivo EPRT especialmente dise\u00f1ado."}], "id": "CVE-2026-1335", "lastModified": "2026-06-17T10:15:37.423", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "3DS.Information-Security@3ds.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1335", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-18T04:56:23.913446Z", "version": "2.0.3"}}]}, "published": "2026-02-16T14:16:18.303", "references": [{"source": "3DS.Information-Security@3ds.com", "tags": ["Vendor Advisory"], "url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1335"}], "sourceIdentifier": "3DS.Information-Security@3ds.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "3DS.Information-Security@3ds.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[Release SOLIDWORKS Desktop 2025 SP0,Release SOLIDWORKS Desktop 2025 SP5]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "Release SOLIDWORKS Desktop 2026 SP0"}}], "product": "solidworks_edrawings", "vendor": "dassault_syst\u00e8mes"}], "analysis": {"en": {"generated_at": "2026-04-18T19:40:17.754942+00:00", "value": {"mitigation_remediation": ["Install a patched release of SOLIDWORKS eDrawings that includes the fix (e.g., the latest available release for 2025 or 2026).", "If an upgrade cannot be performed immediately, limit EPRT file opening to trusted sources only or disable the EPRT import function until a patch is applied.", "Use endpoint security or file\u2011scanning tools to examine all EPRT files for malicious payloads before allowing them to be opened."], "summary": {"action": "Apply Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "Dassault Syst\u00e8mes SOLIDWORKS eDrawings releases 2025 and 2026, including all service packs from SP1.0 up to SP5.0 for 2025 and SP1.1 for 2026, are affected.", "description_and_impact": "An out\u2011of\u2011bounds write flaw in the EPRT file reader of SOLIDWORKS eDrawings enables a malicious user to execute arbitrary code when a specially crafted file is opened. The vulnerability is a classic memory corruption issue (CWE\u2011787) that can compromise confidentiality, integrity, and availability of the system running eDrawings.", "risk_and_exploitability": "The CVSS score of 7.8 signals high severity, while the EPSS score of less than 1% indicates a very low current probability of exploitation. The flaw is not listed in the CISA KEV catalog. The attack vector likely requires the attacker to supply a crafted EPRT file to a user, which is inferred from the description, thus it is a local file\u2011based exploit. The privilege level required for successful exploitation is not explicitly stated in the description, which we infer may be the privileges under which the application runs."}}}}, "created": "2026-02-17T08:49:39.858513+00:00", "updated": "2026-04-18T19:45:08.973042+00:00", "vendors": ["dassault_syst\u00e8mes", "dassault_syst\u00e8mes$PRODUCT$solidworks_edrawings"]}