Priority CRITICAL 96KEV
Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.31309 · Published 2025-02-06 · Fixed in 15.8.9, 23.10 CWE-502
Priority MEDIUM 63
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.29778 · Published 2014-07-01 · No fix listed CWE-119
Priority MEDIUM 56
A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00318 · Published 2025-01-05 · No fix listed CWE-79
Priority MEDIUM 55
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP).
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13248 · Published 2014-07-01 · No fix listed CWE-119
Priority MEDIUM 42
A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files.
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00231 · Published 2026-05-22 · Fixed in 2026.1.3 CWE-94
Priority LOW 36
Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00333 · Published 2026-01-23 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00442 · Published 2025-03-07 · No fix listed CWE-457
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00289 · Published 2024-11-22 · No fix listed CWE-119
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00269 · Published 2024-11-22 · No fix listed CWE-119
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00301 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00322 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00322 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2024-11-22 · No fix listed CWE-121
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00322 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00322 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00322 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00289 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.003 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00269 · Published 2024-11-22 · No fix listed CWE-125
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00286 · Published 2024-11-22 · No fix listed CWE-457
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.003 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.003 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2024-11-22 · No fix listed CWE-416
Load more
THREATIST.IORead the docs