CVE-2025-60749

HighCVSS 7.8

Published: 31/10/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

A DLL hijacking vulnerability in Trimble SketchUp Desktop 2025 allows an attacker to execute arbitrary code via a crafted libcef.dll used by the sketchup_webhelper.exe process.

Risk Assessment

An attacker can gain remote control over the victim's system, leading to data theft, malware installation, or further privilege escalation within the organization's network.

Recommendation

Immediately update Trimble SketchUp to the latest version and implement policies restricting DLL loading from untrusted locations.

Other vulnerabilities in Trimble SketchUp

CVE-2013-3664High
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.

Original NVD description (English source)

DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.