Obsolete Browser - SketchUp

Good morning everyone,

I work in a company managing software licenses and we are facing problems with SketchUp in the Login tool and in the 3D Warehouse where both are suffering from a security block.

Our security team has a block against obsolete browsers, this has affected some software such as Sketchup, but disabling this block can release several vulnerabilities such as,

CVE-2023-2136 – Google Chrome112x (SketchUp browser version) - Memory exploit

I would like to know if there is a way to update this internal browser in the SketchUp application that is used both in the Login and in the 3D Warehouse tool, or a plan to update this browser in the next software updates.

There’s no way to update older versions of SketchUp.
If you want an up to date SketchUp browser, you need one of the latest versions…

Hello, tweenulzeven,

Our license is Pro, we use the latest version of SketchUp, this version of Chromium is in the latest version of SketchUp.

In that case you need to speak to SketchUp directly, most of us here are just people who volunteer their free time to help others with SketchUp problems.
Maybe @colin is able to shed some light on this matter, I pinged him for you…

P.S. I think it is strange that an obsolete browser would be used for Pro 2024. Obsolete browser vulnerabilities are one of the main reasons why SketchUp doesn’t support versions older than a few years!

1 Like

Have you tried to use the latest version of Microsoft Edge which as far as I know runs SketchUp & 3D Warehouse without any issue.

Actually when you Sign in, it will open your actual default browser and not the internal one.

As soon as SketchUp opens, the window that opens internally works with a Chrome embedded in the application. The block is precisely preventing the opening of the default browser because the window with the login button that takes you to the default browser is a Chrome version 112.

Thank you very much for your help, I will try to talk to him about it.

Gabriel,
It appears that CVE-2023-2136 was patched in Chrome version 112.0.5615.137. I do believe Sketchup ships with a more recent version of Chrome.

What are the other vulnerabilities?

At the 3D Basecamp keynote speech today there was mention of a Labs release. It wasn’t quite clear who will have access to that, I will try to get more information. It is likely to have a more recent version of Chrome in it.

1 Like