How many Esri ArcGIS Desktop CVEs are in CISA KEV?

None of Esri ArcGIS Desktop's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Esri ArcGIS Desktop are affected?

2 distinct Esri ArcGIS Desktop versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Esri ArcGIS Desktop CVEs?

Esri ArcGIS Desktop's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-824 (Access of Uninitialized Pointer).

What is the average severity of Esri ArcGIS Desktop CVEs?

The average CVSS base score across Esri ArcGIS Desktop's scored CVEs is 7.8.

Esri ArcGIS Desktop Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Esri ArcGIS Desktop vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Esri ArcGIS Desktop Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Esri ArcGIS Desktop has 3 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Esri ArcGIS Desktop, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include x86, x86 windows.

Severity and exploitation

How the CVSS severity of Esri ArcGIS Desktop's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Esri ArcGIS Desktop's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Esri ArcGIS Desktop CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Esri ArcGIS Desktop version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

All <= v < 10.9.03 CVEs

Fixed in

10.9.03 CVEs

Find a version

3 CVEs

Sort

High vulnerability · 2021-03-25
CVE-2021-29098
Patch
CWE-824
High · CVSS 7.8
EPSS 2.0% (79th pct)2021-03-25
High vulnerability · 2021-03-25
CVE-2021-29097
Patch
CWE-122
High · CVSS 7.8
EPSS 2.4% (83th pct)2021-03-25
High vulnerability · 2021-03-25
CVE-2021-29096
Patch
CWE-416
High · CVSS 7.8
EPSS 1.5% (73th pct)2021-03-25

Common weakness types

The CWE weakness categories most often found in Esri ArcGIS Desktop CVEs. Follow any weakness for its full explanation.

Other Esri products

Browse vulnerabilities for other products by Esri.

Portal for ArcGIS88 CVEs arcgis server70 CVEs ArcGIS Enterprise13 CVEs arcgis pro6 CVEs arcreader6 CVEs Portal for ArcGIS Enterprise Sites5 CVEs arcmap4 CVEs ArcGIS Desktop Background Geoprocessing

Frequently asked questions

Common questions about Esri ArcGIS Desktop vulnerabilities.

How many CVEs does Esri ArcGIS Desktop have?: Esri ArcGIS Desktop has 3 published CVE records since 2021.
How many Esri ArcGIS Desktop CVEs are in CISA KEV?: None of Esri ArcGIS Desktop's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Esri ArcGIS Desktop vulnerabilities?: No Esri ArcGIS Desktop CVEs currently have a tracked public exploit in this dataset.
Which versions of Esri ArcGIS Desktop are affected?: 2 distinct Esri ArcGIS Desktop versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Esri ArcGIS Desktop CVEs?: Esri ArcGIS Desktop's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free), CWE-824 (Access of Uninitialized Pointer).
What is the average severity of Esri ArcGIS Desktop CVEs?: The average CVSS base score across Esri ArcGIS Desktop's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Esri ArcGIS Desktop vulnerabilities

Monitor new Esri ArcGIS Desktop vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing