Skip to content
OpenAdvisories

Vendor

Trimble

40 known vulnerabilities.

Products

SketchUp Viewer 29 SketchUp 6 SPS851 2 SketchUp Pro 2 Cityworks 1 Cityworks (with office companion) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-9264

    Cross-Site Scripting in SketchUp Dynamic Components

    A cross-site scripting (XSS) vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component …

    Trimble SketchUp