CVEvulnerability
CVE-2021-29093
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-03-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 6.4 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.
Affected configurations
• esri arcgis server (<= 10.8.1)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness