{"id":"CVE-2026-1333","state":"PUBLISHED","title":"Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026","description":"A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.","publishedAt":"2026-02-16T13:35:51.031Z","updatedAt":"2026-02-26T14:44:20.234Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"3DS"},"assigner":"3DS","products":["Dassault Systèmes SOLIDWORKS eDrawings"],"affected":[{"vendor":"Dassault Systèmes","product":"SOLIDWORKS eDrawings","defaultStatus":"unaffected","versions":[{"version":"Release SOLIDWORKS Desktop 2025 SP0","status":"affected","lessThanOrEqual":"Release SOLIDWORKS Desktop 2025 SP5","versionType":"custom"},{"version":"Release SOLIDWORKS Desktop 2026 SP0","status":"affected"}]}],"references":["https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1333"],"weaknesses":["CWE-457"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/1xxx/CVE-2026-1333.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-1333","state":"PUBLISHED","datePublished":"2026-02-16T13:35:51.031Z","dateUpdated":"2026-02-26T14:44:20.234Z","assignerShortName":"3DS","assignerOrgId":"f5a594e6-46a7-4e60-8a08-0a786e70e433","dateReserved":"2026-01-22T08:10:51.866Z"},"containers":{"cna":{"title":"Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026","descriptions":[{"lang":"en","value":"A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file."}],"affected":[{"vendor":"Dassault Systèmes","product":"SOLIDWORKS eDrawings","defaultStatus":"unaffected","versions":[{"version":"Release SOLIDWORKS Desktop 2025 SP0","status":"affected","lessThanOrEqual":"Release SOLIDWORKS Desktop 2025 SP5","versionType":"custom"},{"version":"Release SOLIDWORKS Desktop 2026 SP0","status":"affected"}]}],"references":[{"url":"https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1333"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-457","lang":"en","description":"CWE-457 Use of Uninitialized Variable","type":"CWE"}]}],"providerMetadata":{"shortName":"3DS","orgId":"f5a594e6-46a7-4e60-8a08-0a786e70e433","dateUpdated":"2026-02-16T13:35:51.031Z"},"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-1333","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-02-18T04:56:22.391850Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T14:44:20.234Z"}}]}}}