[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feOPrGt9pTYwdGEZ4tNdAJ1N2Xhn2qBqCXOMnbgz6aKo":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":53,"kevVulnerabilities":107,"topProductsByCves":113,"seoMetadata":124,"meta":133},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":52},32549,"trimble",10,29,1,11,"2025-02-06","t",[16,23,27,31,34,37,40,43,46,49],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},165474,"sketchup_viewer",3,17,0,"2024-11-22",{"id":24,"product_name":25,"version_count":26,"cve_count":9,"kev_count":21,"last_cve_update":22},165473,"sketchup",6,{"id":28,"product_name":29,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},165467,"infrastructure_gnss_series_receiver_netr3","2013-03-07",{"id":32,"product_name":33,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},165468,"infrastructure_gnss_series_receiver_netr5",{"id":35,"product_name":36,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},165469,"infrastructure_gnss_series_receiver_netr8",{"id":38,"product_name":39,"version_count":21,"cve_count":11,"kev_count":11,"last_cve_update":13},165465,"cityworks",{"id":41,"product_name":42,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},165471,"infrastructure_netrs_receiver",{"id":44,"product_name":45,"version_count":11,"cve_count":11,"kev_count":21,"last_cve_update":30},165472,"infrastructure_netrs_receiver_firmware",{"id":47,"product_name":48,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},165470,"infrastructure_gnss_series_receiver_netr9",{"id":50,"product_name":51,"version_count":11,"cve_count":11,"kev_count":21,"last_cve_update":30},165466,"infrastructure_gnss_series_receiver_firmware","Trimble is a technology vendor with 10 tracked products and 29 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[54,61,70,74,81,86,91,95,98,103],{"cveId":55,"description":56,"publishedDate":13,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":4,"epssScore":60},"CVE-2025-0994","Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services (IIS) web server.",8.8,"v3.1","High",0.31085,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":68,"epssScore":69},"CVE-2013-3664","Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662.  NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.","2014-07-01",9.3,"v2","Critical",false,0.29778,{"cveId":71,"description":72,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":68,"epssScore":73},"CVE-2013-7388","Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP).  NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).",0.13248,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":66,"severity":79,"isKev":68,"epssScore":80},"CVE-2013-6038","Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file.","2013-12-17",6.8,"Medium",0.02569,{"cveId":82,"description":83,"publishedDate":30,"cvssScore":84,"cvssVersion":66,"severity":79,"isKev":68,"epssScore":85},"CVE-2012-5053","Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",4.3,0.01148,{"cveId":87,"description":88,"publishedDate":22,"cvssScore":89,"cvssVersion":58,"severity":59,"isKev":68,"epssScore":90},"CVE-2024-7510","Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19631.",7.8,0.00469,{"cveId":92,"description":93,"publishedDate":22,"cvssScore":89,"cvssVersion":58,"severity":59,"isKev":68,"epssScore":94},"CVE-2024-7509","Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19576.",0.00415,{"cveId":96,"description":97,"publishedDate":22,"cvssScore":89,"cvssVersion":58,"severity":59,"isKev":68,"epssScore":94},"CVE-2024-7508","Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19575.",{"cveId":99,"description":100,"publishedDate":22,"cvssScore":101,"cvssVersion":58,"severity":79,"isKev":68,"epssScore":102},"CVE-2024-7511","Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files embedded in SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-23000.",5.5,0.00396,{"cveId":104,"description":105,"publishedDate":22,"cvssScore":89,"cvssVersion":58,"severity":59,"isKev":68,"epssScore":106},"CVE-2024-9713","Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23885.",0.00372,[108],{"cveId":55,"description":56,"publishedDate":13,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":4,"epssScore":60,"cisaVulnName":109,"cisaDateAdded":110,"cisaShortDescription":111,"cisaRequiredAction":112},"Trimble Cityworks Deserialization Vulnerability","2025-02-07","Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet Information Services (IIS) web server.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",[114,115,116,117,118,119,120,121,122,123],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":22},{"id":24,"product_name":25,"version_count":26,"cve_count":9,"kev_count":21,"last_cve_update":22},{"id":28,"product_name":29,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},{"id":32,"product_name":33,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},{"id":35,"product_name":36,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},{"id":38,"product_name":39,"version_count":21,"cve_count":11,"kev_count":11,"last_cve_update":13},{"id":41,"product_name":42,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},{"id":44,"product_name":45,"version_count":11,"cve_count":11,"kev_count":21,"last_cve_update":30},{"id":47,"product_name":48,"version_count":21,"cve_count":11,"kev_count":21,"last_cve_update":30},{"id":50,"product_name":51,"version_count":11,"cve_count":11,"kev_count":21,"last_cve_update":30},{"title":125,"metaDescription":126,"keywords":127,"structuredData":128},"Trimble - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Trimble covering 10 products with 29 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Trimble vulnerabilities, Trimble security, Trimble CVE, Trimble threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Trimble KEV, Trimble exploited vulnerabilities",{"@context":129,"@type":130,"name":131,"description":126,"url":132},"https:\u002F\u002Fschema.org","Organization","Trimble","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrimble",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":134,"apiVersion":135},"2026-10-17T11:21:32.821Z","3.0"]