Approved changes feed: RSS · Atom

cpe:2.3:a:dassault_systèmes:solidworks_desktop:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDassault Systèmes (fe2f633c-7f99-5ffa-b416-2f518d032717)
ProductSolidworks Desktop (1ca253b7-682f-536f-bcb6-44748fd69c6c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3476 vulnerable 2026-06-03 15:23:32.734127 Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026
HIGH (7.8)
A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.
Published: 2026-03-16T11:48:18.815Z
Updated: 2026-03-17T03:55:29.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1848 vulnerable 2026-06-03 14:54:34.785525 Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024
HIGH (7.8)
Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted CATPART, DWG, DXF, IPT, JT, SAT, SLDDRW, SLDPRT, STL, STP, X_B or X_T file.
Published: 2024-03-22T10:58:51.824Z
Updated: 2024-09-02T08:10:55.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2763 vulnerable 2026-06-03 14:51:43.846284 Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023
HIGH (7.8)
Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file.
Published: 2023-07-12T07:05:33.333Z
Updated: 2024-09-05T14:18:20.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2762 vulnerable 2026-06-03 14:51:43.844649 Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023
HIGH (7.8)
A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.
Published: 2023-07-12T07:05:26.301Z
Updated: 2024-11-07T18:16:32.428Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.