ZDI-26-095 HIGH 7.8 Published Feb 13, 2026

Dassault Systèmes eDrawings Viewer EPRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Dassault

A high-severity remote code execution vulnerability (CVE-2026-1284) has been discovered in Dassault Systèmes eDrawings Viewer that allows attackers to execute arbitrary code if users open a malicious file or visit a compromised webpage. This represents a significant risk as it requires only user interaction rather than a network-based attack, giving attackers direct code execution capabilities on affected systems. Security teams should prioritize patching eDrawings Viewer installations and educate users to avoid opening suspicious files or visiting untrusted websites until patches are available.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy