TI-2026-01144 CVE-2026-1446 · GHSA-rwq8-4chg-7w5w
XSS issue is Esri ArcGIS Pro versions 3.6.0 and earlier
Priority LOW 22
There is a Cross‑Site Scripting (XSS) issue in Esri ArcGIS Pro versions 3.6.0 and earlier.
Vulnerabilities
6 records
TI-2025-00907 CVE-2025-1068 · GHSA-275c-3cvw-rvcg
There is a code injection vulnerability in Esri ArcGIS AllSource
Priority LOW 33
There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the file…
TI-2025-00906 CVE-2025-1067 · GHSA-2gg3-vm5q-jcq2
There is a code injection vulnerability in ArcGIS Pro
Priority LOW 33
There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem…
TI-2021-09985 CVE-2021-29098 · GHSA-5gqj-6vcf-6f45
ArcGIS general raster security update: uninitialized pointer
Priority MEDIUM 40
Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacke…
TI-2021-09984 CVE-2021-29097 · GHSA-wr7p-7f4r-37fr
ArcGIS general raster security update: buffer overflow
Priority LOW 39
Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to a…
TI-2021-09983 CVE-2021-29096 · GHSA-8vhv-h63p-g472
ArcGIS general raster security update: use-after-free
Priority LOW 37
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve ar…