CVE-2026-1333

Katalog CVE

CVSS 7.8 · High EPSS 0,21%

Kerentanan Use of Uninitialized Variable pada 3ds solidworks edrawings. Skor CVSS 3.1 7.8 (High) menurut 3ds.com.

Deskripsi (NVD)

A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

Rincian

Terbit di NVD

16 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber 3ds.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-457: Use of Uninitialized Variable

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1333 advisory vendor