Hello,
We have installed the 3.5.6 patch to address this vulnerability (https://www.esri.com/arcgis-blog/products/arcgis-pro/administration/arcgis-pro-3-6-1-patch) but the software version number (maybe in the registry) is not getting updated. This causing issues with our IT Security compliance because when they scan our machines, they see 3.5.5 which is the vulnerable version. We would like to find out if this is something that ESRI will be able to correct in a future 3.5.x update?
Images below - ArcGIS Pro shows 3.5.6 but Control Panel Uninstall programs still shows 3.5.5
***Note that this post has been moved from its original location in an ArcGIS Topographic Mapping Blog article by a Community Manager. 4/28/2026
Hi @JakeMatthys
Thank you for your post. You have posted to the ArcGIS Topographic Mapping community. We are an extension to ArcGIS Pro; our extension participates and consumes the patches produced by the ArcGIS Pro team. Our team does not produce the patches.
I have a machine running ArcGIS Pro 3.5. I have downloaded and installed patches 1 thru 6. I am seeing the same information in your screenshots. The screenshot of your control panel shows version 3.5.57366. 3.5 is the version of ArcGIS Pro and 57366 is the build number.
I use the following document to help me keep track of the patches, build numbers, and release dates for each ArcGIS Pro version:
I refer to the instructions in the following document to find the installed ArcGIS patches on my computer:
When I run the command above, I see the following:
When I open the Registry Editor and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\ESRI\ArcGISPro\Updates\ I see the following:
If possible, can you please report to the ArcGIS Pro Community, or Esri Technical Support, or your local distributor if you are outside the United States, the registry setting or value that is returning 3.5.5 instead of 3.5.6 when scanned by your IT Security.
Do you encounter the same issue in an ArcGIS Pro 3.6 environment?
Cheers,
Dan
Hi Dan,
Thanks so much for the detailed reply. I noticed that I had posted in an incorrect thread after posting, but the process of deleting my post was a bit much, so I let it stay. My organization has contacted technical support for this issue. I can confirm that the powershell command does show that I have patch 6 installed, just like your example above. Thanks again for your input.
- Jake
Hi @JakeMatthys
Thank you for your reply. I am glad your organization contacted technical support for this issue. I hope they are able to help.
Have a good weekend.
Cheers,
Dan