Threats tagged 'ghsa-xqgq-c6mj-rmrj'

A DLL Hijacking vulnerability (CVE-2025-60749) affects Trimble SketchUp desktop 2025. The issue arises from the use of a crafted libcef.dll by the sketchup_webhelper.exe process, potentially allowing an attacker with local privileges to execute arbitrary code. The vulnerability has a high severity with a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability.