Esri Arcgis Desktop vulnerabilities
3 known vulnerabilities affecting esri/arcgis_desktop.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3
Vulnerabilities
Page 1 of 1
CVE-2021-29097P3HIGHCVSS 7.8≥ All, < 10.9.02021-03-25
CVE-2021-29097 [HIGH] CWE-121 CVE-2021-29097: Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, Ar
Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
nvd
CVE-2021-29098P3HIGHCVSS 7.8≥ All, < 10.9.02021-03-25
CVE-2021-29098 [HIGH] CWE-824 CVE-2021-29098: Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcRead
Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
nvd
CVE-2021-29096P3HIGHCVSS 7.8≥ All, < 10.9.02021-03-25
CVE-2021-29096 [HIGH] CWE-416 CVE-2021-29096: A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Deskt
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
nvd