SketchUp vulnerabilities

12 known vulnerabilities in SketchUp from Trimble. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  SketchUp: Use After Free

  CVE-2026-121741Nov 12, 2026Trimble

  Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability

• 9.3 Critical severity

  SketchUp: Improper Control of Generation of Code

  CVE-2026-9264May 22, 2026Trimble

  A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component o

• 7.8 High severity

  SketchUp: Use After Free

  CVE-2025-15062Jan 23, 2026Trimble

  Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability

• 7.8 High severity

  SketchUp: Use of Uninitialized Variable

  CVE-2025-2024Mar 7, 2025Trimble

  Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulne

• 7.8 High severity

  SketchUp: Use After Free

  CVE-2024-7510Nov 22, 2024Trimble

  Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability

• 7.8 High severity

  SketchUp: Out-of-bounds Write

  CVE-2024-7509Nov 22, 2024Trimble

  Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this

• 7.8 High severity

  SketchUp Viewer: Out-of-bounds Write

  CVE-2024-7508Nov 22, 2024Trimble

  Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to

• 7.8 High severity

  SketchUp Viewer: Out-of-bounds Write

  CVE-2024-9731Nov 22, 2024Trimble

  Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit t

• 7.8 High severity

  SketchUp Viewer: Out-of-bounds Write

  CVE-2024-9730Nov 22, 2024Trimble

  Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit t

• 7.8 High severity

  SketchUp Viewer: Use After Free

  CVE-2024-9729Nov 22, 2024Trimble

  Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this

• 7.8 High severity

  SketchUp Pro: Use After Free

  CVE-2024-9713Nov 22, 2024Trimble

  Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulne

• 7.8 High severity

  SketchUp: Use After Free

  CVE-2024-9712Nov 22, 2024Trimble

  Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability