AP
Product
ArcGIS Pro
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 1Low 0
Watch
Add ArcGIS Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29098 | 7.8 | Mar 25 | Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and… Affected: through 2.7 |
| CVE-2021-29097 | 7.8 | Mar 25 | Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and… Affected: through 2.7 |
| CVE-2021-29096 | 7.8 | Mar 25 | A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows… Affected: through 2.7 |
| CVE-2025-1068 | 7.3 | Feb 25 | There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to… Affected: 3.3; 3.4 |
| CVE-2025-1067 | 7.3 | Feb 25 | There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce… Affected: 3.3; 3.4 |
| CVE-2026-1446 | 5.0 | Jan 26 | XSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier Affected: 1.0 before 3.6.1 |
Showing 6