Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Esri Component: Arcmap Clear all filters
TI-2021-09985 CVE-2021-29098 · GHSA-5gqj-6vcf-6f45

ArcGIS general raster security update: uninitialized pointer

Priority MEDIUM 40

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacke…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02021 Published 2021-03-25 Fixed in 10.9.0, 4.7.2 CWE-824
TI-2021-09984 CVE-2021-29097 · GHSA-wr7p-7f4r-37fr

ArcGIS general raster security update: buffer overflow

Priority LOW 39

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02988 Published 2021-03-25 Fixed in 10.9.0, 4.7.2 +1 CWE-121
TI-2021-09983 CVE-2021-29096 · GHSA-8vhv-h63p-g472

ArcGIS general raster security update: use-after-free

Priority LOW 37

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve ar…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01577 Published 2021-03-25 Fixed in 10.9.0 CWE-416