CyberSecBulletin

Trimble vulnerabilities

We track 39 vulnerabilities in Trimble products across 6 products. 39 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 12, 2026.

39vulnerabilities
2critical
37high
1exploited
7.9average CVSS score

Latest Trimble vulnerabilities

  • 7.8 High severity

    SketchUp: Use After Free

    CVE-2026-121741Trimble

    Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability

  • 9.3 Critical severity

    SketchUp: Improper Control of Generation of Code

    CVE-2026-9264Trimble

    A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component o

  • 7.8 High severity

    SketchUp: Use After Free

    CVE-2025-15062Trimble

    Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability

  • 7.8 High severity

    SketchUp: Use of Uninitialized Variable

    CVE-2025-2024Trimble

    Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulne

  • 8.8 High severity

    Trimble Cityworks Deserialization Exploited

    CVE-2025-0994TrimbleEPSS 35.2%

    Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Micr

  • 7.8 High severity

    SketchUp: Use After Free

    CVE-2024-7510Trimble

    Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability

  • 7.8 High severity

    SketchUp: Out-of-bounds Write

    CVE-2024-7509Trimble

    Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Write

    CVE-2024-7508Trimble

    Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Write

    CVE-2024-9731Trimble

    Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit t

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Write

    CVE-2024-9730Trimble

    Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit t

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9729Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9728Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9727Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Write

    CVE-2024-9726Trimble

    Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9725Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9724Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9723Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9722Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9721Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Read

    CVE-2024-9720Trimble

    Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9719Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Read

    CVE-2024-9718Trimble

    Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit

  • 7.8 High severity

    SketchUp Viewer: Use of Uninitialized Resource

    CVE-2024-9717Trimble

    Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to expl

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9716Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9715Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2024-9714Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Pro: Use After Free

    CVE-2024-9713Trimble

    Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulne

  • 7.8 High severity

    SketchUp: Use After Free

    CVE-2024-9712Trimble

    Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability

  • 9.8 Critical severity

    tm4web: Incorrect Default Permissions

    CVE-2023-27195TrimbleEPSS 1.01%

    Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2023-50196Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Read

    CVE-2023-50195Trimble

    Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Read

    CVE-2023-50194Trimble

    Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2023-50193Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2023-50192Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2023-50191Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Out-of-bounds Write

    CVE-2023-50190Trimble

    Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit

  • 7.8 High severity

    SketchUp Viewer: Use After Free

    CVE-2023-50189Trimble

    Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

  • 7.8 High severity

    SketchUp Viewer: Use of Uninitialized Variable

    CVE-2023-50188Trimble

    Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to expl

  • 7.8 High severity

    SketchUp Viewer: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-50187Trimble

    Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit t