What is the CVSS score of CVE-2026-1335?

CVE-2026-1335 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Solidworks Edrawings are affected by CVE-2026-1335?

A critical vulnerability in SOLIDWORKS eDrawings (versions 2025-2026) allows attackers to execute arbitrary code by opening malicious EPRT files, potentially compromising systems across engineering…

How to fix or mitigate CVE-2026-1335?

Within 24 hours: Inventory all SOLIDWORKS 2025-2026 installations and notify affected teams to avoid opening EPRT files from untrusted sources; restrict file-sharing permissions. Within 7 days: Implement network segmentation isolating SOLIDWORKS systems, disable EPRT file association if business-critical, and deploy email controls blocking EPRT attachments. Within 30 days: Upgrade to patched SOLIDWORKS version when available, or migrate critical workflows to alternative CAD platforms if patches are delayed.

Solidworks Edrawings CVE-2026-1335

HIGH

Out-of-bounds Write (CWE-787)

2026-02-16 3DS.Information-Security@3ds.com

Buffer Overflow RCE Solidworks Edrawings

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 16, 2026 - 14:16 nvd

HIGH 7.8

DescriptionCVE.org

An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

AnalysisAI

Arbitrary code execution in SOLIDWORKS eDrawings 2025-2026 via out-of-bounds write in EPRT file parsing allows local attackers to gain code execution when opening malicious files. The vulnerability requires user interaction and affects both confidentiality, integrity, and availability. No patch is currently available.

Technical ContextAI

Classified as CWE-787 (Out-of-bounds Write). Affects Solidworks Edrawings. An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.