CVE-2025-1067

creationtimestamp| type| source ---|---|--- 2025-02-25 17:15:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065651086000181 2025-02-25 17:23:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5338 2025-02-25 19:03:23+00:00| seen| https://t.me/cvedetector/18889 2025-08-22...

CVE-2025-1067 There is a code injection vulnerability in ArcGIS Pro

There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the fil...

CVE-2025-1067

CVE-2025-1067 describes an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4. A low-privileged user with write access to the local filesystem can place a malicious executable that, when a specific ArcGIS Pro action is performed, may execute with the victim’s privileges. The issue...