Trimble / SketchUp
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-9264 | Cross-Site Scripting in SketchUp Dynamic Components | CRITICAL | 9.3 | May 22, 2026 |
| CVE-2025-15062 | Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH | 7.8 | Jan 23, 2026 |
| CVE-2025-2024 | Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability | HIGH | 7.8 | Mar 7, 2025 |
| CVE-2024-7511 | Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | MEDIUM | 5.5 | Nov 22, 2024 |
| CVE-2024-7510 | Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2024-7509 | Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2024-7508 | Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2024-9731 | Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2024-9730 | Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2024-9729 | Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2024-9713 | Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2024-9712 | Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability | HIGH | 7.8 | Nov 22, 2024 |
| CVE-2013-7388 | Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbi… | HIGH | 9.3 | Jul 1, 2014 |
| CVE-2013-3664 | Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MA… | HIGH | 9.3 | Jul 1, 2014 |
Showing 1 to 12 of 12 CVEs