ArcGIS Pro vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AP

Product

ArcGIS Pro

by Esri · last CVE Jan 26, 2026

6

CVEs

0

On KEV

7.8

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 5Medium 1Low 0

Severity

All severities6 Critical0 High5 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ArcGIS Pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-29098	7.8	2%	Mar 25	Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and… Affected: through 2.7
CVE-2021-29097	7.8	3%	Mar 25	Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and… Affected: through 2.7
CVE-2021-29096	7.8	2%	Mar 25	A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows… Affected: through 2.7
CVE-2025-1068	7.3	0%	Feb 25	There is a code injection vulnerability in Esri ArcGIS AllSource Affected: 3.3; 3.4
CVE-2025-1067	7.3	0%	Feb 25	There is a code injection vulnerability in ArcGIS Pro Affected: 3.3.0 through 3.3.2; 3.4.0