Microsoft has momentarily removed support for the SketchUp file format used for 3D model data storage after the patches it issued to address 117 security flaws impacting Microsoft 365 applications were circumvented, according to SecurityWeek. Zscaler ThreatLabz researchers discovered 20 security vulnerabilities from the numerous SketchUp APIs and wrapper functions invoked during the SKP file parsing process in Microsoft 365, including out-of-bounds write, heap buffer overflow, use-after-free, stack buffer overflow, integer overflow, and type confusion issues.

Source: SC Magazine