Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Trimble Component: Sketchup Clear all filters
TI-2024-06960 CVE-2024-7511 · GHSA-5vh4-cr62-86w3

Out-of-bounds read in Trimble SketchUp Pro

Priority LOW 25

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00396 Published 2024-11-22 No fix listed CWE-125
TI-2024-06959 CVE-2024-7510 · GHSA-6wqp-v957-w63g

Use after free in Trimble SketchUp

Priority LOW 36

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00469 Published 2024-11-22 No fix listed CWE-416
TI-2024-06958 CVE-2024-7509 · GHSA-rg23-vpf8-9ppw

Stack-based buffer overflow in Trimble SketchUp

Priority LOW 36

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00415 Published 2024-11-22 No fix listed CWE-121
TI-2024-09028 CVE-2024-9731 · GHSA-f994-94fv-xfrx

Memory corruption in Trimble SketchUp Viewer

Priority LOW 36

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00289 Published 2024-11-22 No fix listed CWE-119
TI-2024-09027 CVE-2024-9730 · GHSA-vmj9-px92-p7h7

Memory corruption in Trimble SketchUp Viewer

Priority LOW 36

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00269 Published 2024-11-22 No fix listed CWE-119
TI-2024-09026 CVE-2024-9729 · GHSA-g3xp-3pvm-prv6

Use after free in Trimble SketchUp Viewer

Priority LOW 36

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00301 Published 2024-11-22 No fix listed CWE-416
TI-2024-09010 CVE-2024-9713 · GHSA-2v3j-g7x7-59j7

Use after free in Trimble SketchUp Pro

Priority LOW 36

Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00372 Published 2024-11-22 No fix listed CWE-416
TI-2024-09009 CVE-2024-9712 · GHSA-3hp2-jg96-579w

Use after free in Trimble SketchUp

Priority LOW 36

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00372 Published 2024-11-22 No fix listed CWE-416
TI-2013-03206 CVE-2013-3664 · GHSA-hg63-5gfq-wwmc

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote…

Priority MEDIUM 63

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.29778 Published 2014-07-01 No fix listed CWE-119