Read the docs

Trimble

Records44All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

Trimble records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Sketchup · all components

Priority MEDIUM 63

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.29778 Published 2014-07-01 No fix listed CWE-119
Priority LOW 36

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00289 Published 2024-11-22 No fix listed CWE-119
Priority LOW 36

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00269 Published 2024-11-22 No fix listed CWE-119
TI-2024-09026 CVE-2024-9729 · GHSA-g3xp-3pvm-prv6

Use after free in Trimble SketchUp Viewer

Priority LOW 36

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00301 Published 2024-11-22 No fix listed CWE-416
TI-2024-09010 CVE-2024-9713 · GHSA-2v3j-g7x7-59j7

Use after free in Trimble SketchUp Pro

Priority LOW 36

Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00372 Published 2024-11-22 No fix listed CWE-416
TI-2024-09009 CVE-2024-9712 · GHSA-3hp2-jg96-579w

Use after free in Trimble SketchUp

Priority LOW 36

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00372 Published 2024-11-22 No fix listed CWE-416
TI-2024-06959 CVE-2024-7510 · GHSA-6wqp-v957-w63g

Use after free in Trimble SketchUp

Priority LOW 36

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00469 Published 2024-11-22 No fix listed CWE-416
Priority LOW 36

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00415 Published 2024-11-22 No fix listed CWE-121
TI-2024-06960 CVE-2024-7511 · GHSA-5vh4-cr62-86w3

Out-of-bounds read in Trimble SketchUp Pro

Priority LOW 25

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00396 Published 2024-11-22 No fix listed CWE-125
Open these records in search →