CVE-2026-8314
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. Improper validation of user-supplied data can result in an out-of-bounds write.
Risk Assessment
An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file. This could lead to system compromise or data theft.
Recommendation
Update Arena® Simulation to the latest patched version immediately. Additionally, follow security best practices when opening files from untrusted sources.
Other vulnerabilities in Arena Simulation
See all- CVE-2026-8313High
A memory corruption vulnerability exists in Arena® Simulation within the linker.exe (Siman) component due to improper validation of user-supplied data, leading to an out-of-bounds write.
- CVE-2026-8312High
A memory corruption vulnerability in Arena® Simulation's expmt.exe (Siman) component due to improper validation of user-supplied data leads to an out-of-bounds write. An attacker can exploit this to execute arbitrary code in the current process context by tricking a user into opening a malicious file.
- CVE-2026-8085High
A memory corruption vulnerability exists in Arena® Simulation within the model.exe (Siman) component due to improper validation of user-supplied data, leading to an out-of-bounds write. An attacker can exploit this to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.
Original NVD description (English source)
A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) component. The vulnerability stems from improper validation of user-supplied data, which can result in an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process by convincing a user to open a malicious file.