CVE-2025-60749

CVE-2025-60749 Vulnérabilité de détournement de DLL dans SketchUp Desktop 2025...

CVE-2013-3664_MAC

Sketchup MAC Pict 材质调色板栈损坏 - CVE-2013-3664 SketchUp 在解析嵌入的 MACPict 纹理时未能验证输入。恶意纹理、缩略图或背景图像触发栈溢出后，可证明能够执行任意代码。当 Windows 资源管理器读取 .skp 文件中的嵌入缩略图时，也可能触发此问题。 摘要 标题: Sketchup MAC Pict 材质调色板栈损坏 CVE ID: CVE-2013-3664 永久链接: http://www.binamuse.com/advisories/BINA-20130521A.txt 公告发布日期: 2013-05-23 类别:...

CVE-2013-3664_BMP

Sketchup BMP Material RLE4 Desbordamiento de Montón - CVE-2013-3664 SketchUp falla al validar la entrada al analizar una textura comprimida BMP RLE4 incrustada. Se demuestra posible la ejecución de código arbitrario después de que una textura maliciosa, miniatura o imagen de fondo desencadena un...

CVE-2026-9264

A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...

CVE-2026-9264

A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...

CVE-2026-9264 Cross-Site Scripting in SketchUp Dynamic Components

A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...

CVE-2026-9264

A cross-site scripting (XSS) vulnerability exists in SketchUp 2026 within the Dynamic Components feature. The root cause is improper input sanitization in the component options window, which can be exploited via maliciously crafted SKP files . By leveraging an embedded Internet Explorer 11 browse...

EUVD-2026-31386

A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...

CVE-2026-9264 Cross-Site Scripting in SketchUp Dynamic Components

A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...

CVE-2026-9264

A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...

Trimble SketchUp 安全漏洞

Trimble SketchUp is a 3D modeling software developed by Trimble in the United States. It is designed for architects, urban planning experts, producers, game developers, and professionals in related fields. Trimble SketchUp has a security vulnerability that stems from improper handling of dynamic...

CVE-2026-9264: Undefined Security Weakness

A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...

PT-2026-42704

Name of the Vulnerable Software and Affected Versions SketchUp 2026 Description A cross-site scripting XSS issue in the Dynamic Components feature allows remote code execution and local file exfiltration via maliciously crafted SKP files. The flaw is caused by improper input sanitization in the...

CVE-2025-15062

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-15062

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-15062

CVE-2025-15062 : A use-after-free vulnerability in Trimble SketchUp SKP file parsing allows remote code execution. The flaw occurs during SKP file parsing when code operates on an object without verifying its existence, enabling an attacker to run code in the process with the user’s privileges. E...

CVE-2025-15062 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-15062 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-15062: Use After Free

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

Trimble SketchUp resource management error vulnerability

Trimble SketchUp is a 3D modeling software developed by Trimble in the United States. It is designed for architects, urban planning experts, producers, game developers, and professionals in related fields. Trimble SketchUp has a resource management vulnerability that stems from the lack of...