trimble vulnerabilities

Recent CVEs affecting trimble products. 26 tracked.

trimble has 26 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2025-03-07. Highest priority: CVE-2025-0994 (score 80/100).

• CVE-2025-2024 HIGH 7.8 UPGRADE Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability
• CVE-2025-0994 HIGH 8.8 EXPLOITED UPGRADE Trimble Cityworks Deserialization Vulnerability
• CVE-2024-9731 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability
• CVE-2024-9730 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability
• CVE-2024-9729 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9728 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9727 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9726 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
• CVE-2024-9725 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9724 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9723 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9722 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9721 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9720 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-9719 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9718 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-9717 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability
• CVE-2024-9716 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9715 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9714 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9713 HIGH 7.8 DOWNGRADE Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-9712 HIGH 7.8 DOWNGRADE Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-7511 MEDIUM 5.5 DOWNGRADE Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-7510 HIGH 7.8 DOWNGRADE Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-7509 HIGH 7.8 DOWNGRADE Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
• CVE-2024-7508 HIGH 7.8 DOWNGRADE Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

FAQ

How do I fix trimble vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is trimble being exploited right now?

Yes: 1 trimble CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which trimble CVE should I patch first?

CVE-2025-0994 currently ranks highest (80/100): Trimble Cityworks Deserialization Vulnerability.

Products

• cityworks
• sketchup
• sketchup viewer

RSS feed for trimble · ← Back to latest CVEs