This vulnerability, identified as CVE-2025-60749, is a DLL Hijacking issue in Trimble SketchUp desktop 2025. The flaw arises when the sketchup_webhelper.exe process loads a maliciously crafted libcef.dll, potentially allowing an attacker with local privileges to execute arbitrary code with the privileges of the affected process. The CVSS v3.1 score is 7.8, reflecting high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.

Successful exploitation could allow an attacker with local access and low privileges to execute arbitrary code with the privileges of sketchup_webhelper.exe, potentially leading to full compromise of the affected system. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users and monitor for suspicious activity related to sketchup_webhelper.exe and DLL loading behavior.