Esri Arcmap — known CVE vulnerabilities

Every CVE whose affected-product data names Esri Arcmap, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2012-1661 — CVSS 9.3 (critical): ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows…
• CVE-2021-29096 — CVSS 7.8 (high): A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier)…
• CVE-2021-29097 — CVSS 7.8 (high): Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and…
• CVE-2021-29098 — CVSS 7.8 (high): Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine…