DLL Hijacking Vulnerability in Trimble SketchUp Desktop 2025
CVE-2025-60749

7.8HIGH

Key Information:

Vendor

Trimble

Status
Trimble SketchUp Desktop
Vendor
CVE Published:
31 October 2025

What is CVE-2025-60749?

A DLL Hijacking vulnerability exists in Trimble SketchUp Desktop 2025, which can be exploited through a manipulated libcef.dll file leveraged by sketchup_webhelper.exe. This security issue could allow an attacker to execute arbitrary code within the context of the affected application. It is crucial for users to be aware of this vulnerability and take necessary precautions to secure their systems.

References

http://sketchup.com
https://help.sketchup.com/zh-CN/downloading-sketchup
https://yawataa.github.io/2025/10/23/CVE-2025-60749/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.