https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1446.htmlhttps://patchthecve.com/cve/CVE-2026-1446.htmlWed, 17 Jun 2026 10:15:48 +0000MEDIUM 5.0: There is a Cross‑Site Scripting (XSS) issue in Esri ArcGIS Pro versions 3.6.0 and earlier. ArcGIS Pro is a desktop application, and exploitation is limited to local users interacting with the application; no privileged role or elevated permissions are required beyond standard local user access. A lohttps://patchthecve.com/cve/CVE-2025-1068.htmlhttps://patchthecve.com/cve/CVE-2025-1068.htmlWed, 17 Jun 2026 08:38:19 +0000HIGH 7.3: There is an untrusted search path vulnerability in Esri ArcGIS AllSource 1.2 and 1.3 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS AllSource, the fhttps://patchthecve.com/cve/CVE-2025-1067.htmlhttps://patchthecve.com/cve/CVE-2025-1067.htmlWed, 17 Jun 2026 08:38:19 +0000HIGH 7.3: There is an untrusted search path vulnerability in Esri ArcGIS Pro 3.3 and 3.4 that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the filesystem. When the victim performs a specific action using ArcGIS ArcGIS Pro, the file c