Vendors / Trimble Records 44 All Threatist records
Exploited (KEV) 1 In CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 36 CVSS 7.0–8.9
Exploited now Trimble records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 63
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.
CVSS 2.0 HIGH 9.3· Network · No auth · Interaction — · EPSS 0.29778 · Published 2014-07-01 · No fix listed CWE-119
Priority MEDIUM 55
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP).
CVSS 2.0 HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13248 · Published 2014-07-01 · No fix listed CWE-119
Priority LOW 36
Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00442 · Published 2025-03-07 · No fix listed CWE-457
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00289 · Published 2024-11-22 · No fix listed CWE-119
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00269 · Published 2024-11-22 · No fix listed CWE-119
Priority LOW 36
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00301 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00372 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00469 · Published 2024-11-22 · No fix listed CWE-416
Priority LOW 36
Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00415 · Published 2024-11-22 · No fix listed CWE-121
Priority LOW 25
Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00396 · Published 2024-11-22 · No fix listed CWE-125
Open these records in search → All records by CVSS severity
Critical3 High36 Medium5 Low0 No CVSS0