ArcGIS Pro vulnerabilities

2 known vulnerabilities in ArcGIS Pro from Esri. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  ArcGIS AllSource: Untrusted Search Path

  CVE-2025-1068Feb 25, 2025Esri

  There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a speci

• 7.3 High severity

  ArcGIS Pro: Incorrect Permission Assignment for Critical Resource

  CVE-2025-1067Feb 25, 2025Esri

  There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific ac