Vendor

Trimble

Products

CVEs

Across products

Status

Private

Products

Sketchup Viewer
30 CVEs
Sketchup
14 CVEs
SPS851
2 CVEs
Cityworks
1 CVE
Cityworks with office companion
1 CVE
Infrastructure Gnss Series Receiver Netr3
1 CVE
Infrastructure Gnss Series Receiver Netr5
1 CVE
Infrastructure Gnss Series Receiver Netr8
1 CVE
Infrastructure Netrs Receiver
1 CVE
NetRS
1 CVE
SketchUp desktop
1 CVE
TM4Web
1 CVE

Recent CVEs

View all 47 CVEs →

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2025-0994	Trimble Cityworks	Hig	0.71	8.8	0.31	KEV	Feb 6, 2025	Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet…
CVE-2023-27195	Trimble TM4Web	Cri	0.64	9.8	0.01		Nov 8, 2024	Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create…
CVE-2026-9264	Sketch Sketch	Cri	0.60	9.3	0.00		May 22, 2026	A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window,…
CVE-2025-15062	Trimble Sketchup	Hig	0.51	7.8	0.00		Jan 23, 2026	Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target…
CVE-2025-60749	Trimble SketchUp desktop	Hig	0.51	7.8	0.00		Oct 31, 2025	DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.
CVE-2025-2024	Trimble Sketchup	Hig	0.51	7.8	0.00		Mar 7, 2025	Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that…
CVE-2024-7510	Trimble Sketchup	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target…
CVE-2024-7509	Trimble Sketchup	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in…
CVE-2024-7508	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this…
CVE-2024-9731	Trimble Sketchup	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability…
CVE-2024-9730	Trimble Sketchup	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability…
CVE-2024-9729	Trimble Sketchup	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9728	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9727	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9726	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this…
CVE-2024-9725	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9724	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9723	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9722	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9721	Trimble Sketchup Viewer	Hig	0.51	7.8	0.00		Nov 22, 2024	Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…

CVE-2025-0994HigKEVFeb 6, 2025
Trimble
Cityworks
risk 0.71cvss 8.8epss 0.31
Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet…
CVE-2023-27195CriNov 8, 2024
Trimble
TM4Web
risk 0.64cvss 9.8epss 0.01
Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create…
CVE-2026-9264CriMay 22, 2026
Sketch
Sketch
risk 0.60cvss 9.3epss 0.00
A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window,…
CVE-2025-15062HigJan 23, 2026
Trimble
Sketchup
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target…
CVE-2025-60749HigOct 31, 2025
Trimble
SketchUp desktop
risk 0.51cvss 7.8epss 0.00
DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.
CVE-2025-2024HigMar 7, 2025
Trimble
Sketchup
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that…
CVE-2024-7510HigNov 22, 2024
Trimble
Sketchup
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target…
CVE-2024-7509HigNov 22, 2024
Trimble
Sketchup
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in…
CVE-2024-7508HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this…
CVE-2024-9731HigNov 22, 2024
Trimble
Sketchup
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability…
CVE-2024-9730HigNov 22, 2024
Trimble
Sketchup
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability…
CVE-2024-9729HigNov 22, 2024
Trimble
Sketchup
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9728HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9727HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9726HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this…
CVE-2024-9725HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9724HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9723HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9722HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…
CVE-2024-9721HigNov 22, 2024
Trimble
Sketchup Viewer
risk 0.51cvss 7.8epss 0.00
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in…

View all 47 CVEs →