What is the CVSS score of CVE-2026-1334?

CVE-2026-1334 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Solidworks Edrawings are affected by CVE-2026-1334?

A critical vulnerability in SOLIDWORKS eDrawings (versions 2025-2026) allows attackers to execute arbitrary code by sending specially crafted files to users.

How to fix or mitigate CVE-2026-1334?

Within 24 hours: Identify all users and systems running SOLIDWORKS eDrawings 2025-2026 and restrict file sharing policies for .eprt files. Within 7 days: Implement network-level controls blocking .eprt file transfers and disable eDrawings if operationally feasible pending patch availability. Within 30 days: Establish a monitoring plan for vendor patch release and prepare a rapid deployment process; consider upgrading to versions prior to 2025 if business-critical.

Solidworks Edrawings CVE-2026-1334

HIGH

Out-of-bounds Read (CWE-125)

2026-02-16 3DS.Information-Security@3ds.com

Buffer Overflow RCE Information Disclosure Solidworks Edrawings

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 16, 2026 - 14:16 nvd

HIGH 7.8

DescriptionCVE.org

An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

AnalysisAI

Arbitrary code execution in SOLIDWORKS eDrawings 2025-2026 results from an out-of-bounds read flaw in EPRT file processing, enabling attackers to compromise systems by tricking users into opening malicious files. The vulnerability affects local users with no privilege requirements and carries a high severity rating, though no patch is currently available.

Technical ContextAI

Classified as CWE-125 (Out-of-bounds Read). Affects Solidworks Edrawings. An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.