Read the docs

Esri

Records195All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high35CVSS 7.0–8.9

Exploited now

Esri records in CISA KEV

No Esri vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Arcreader · all components

Priority MEDIUM 40

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacke…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02021 Published 2021-03-25 Fixed in 10.9.0, 4.7.2 CWE-824
Priority LOW 39

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02988 Published 2021-03-25 Fixed in 10.9.0, 4.7.2 +1 CWE-121
Priority LOW 37

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve ar…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01577 Published 2021-03-25 Fixed in 10.9.0 CWE-416
TI-2021-10003 CVE-2021-29117 · GHSA-m9jh-c36p-x9mj

arcreader use-after-free

Priority LOW 36

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00443 Published 2022-08-12 Fixed in 10.8.2 CWE-416
Open these records in search →