CISA Known Exploited Vulnerabilities catalog (page 16)
Page 16 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 16 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2021-38647 | Microsoft Azure Automation State Configuration +19 | Critical 9.8 | Known | 13 | Yes | 0.999 (100.0th percentile) | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | ||
CVE-2021-38645 | Microsoft Azure Automation State Configuration +19 | High 7.8 | — | 0 | — | 0.027 (86.2th percentile) | Open Management Infrastructure Elevation of Privilege Vulnerability | ||
CVE-2021-38003 | Debian Debian Linux +2 | High 8.8 | — | 3 | — | 0.386 (98.6th percentile) | Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-38000 | Debian Debian Linux +2 | Medium 6.1 | — | 0 | — | 0.049 (92.2th percentile) | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. | ||
CVE-2021-37976 | Debian Debian Linux +2 | Medium 6.5 | — | 0 | — | 0.199 (97.4th percentile) | Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. | ||
CVE-2021-37975 | Debian Debian Linux +2 | High 8.8 | — | 1 | — | 0.349 (98.4th percentile) | Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-37973 | Debian Debian Linux +2 | Critical 9.6 | — | 0 | — | 0.117 (96.1th percentile) | Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | ||
CVE-2021-36955 | Microsoft Windows 10 1507 +41 | High 7.8 | Known | 1 | — | 0.041 (90.8th percentile) | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
CVE-2021-36948 | Microsoft Windows 10 1809 +16 | High 7.8 | — | 0 | — | 0.233 (97.8th percentile) | Windows Update Medic Service Elevation of Privilege Vulnerability | ||
CVE-2021-36942 | Microsoft Windows Server 2004 +19 | High 7.5 | Known | 0 | Yes | 0.660 (99.3th percentile) | Windows LSA Spoofing Vulnerability | ||
CVE-2021-36742 | Trend Micro Trend Micro Apex One +6 | High 7.8 | — | 0 | — | 0.015 (74.2th percentile) | A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on aff… | ||
CVE-2021-36741 | Trend Micro Trend Micro Apex One +6 | High 8.8 | — | 0 | — | 0.050 (92.2th percentile) | An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files… | ||
CVE-2021-35464 | Forgerock Access Management +2 | Critical 9.8 | Known | 2 | Yes | 1.000 (100.0th percentile) | ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. | ||
CVE-2021-35395 | — | Critical 9.8 | — | 0 | — | 0.981 (99.9th percentile) | Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. | ||
CVE-2021-35211 | Solarwinds Serv-U +1 | Critical 9.0 | Known | 3 | — | 0.912 (99.8th percentile) | Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. | ||
CVE-2021-34527 | Microsoft Windows 10 1507 +37 | High 8.8 | Known | 36 | Yes | 0.998 (100.0th percentile) | A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. | ||
CVE-2021-34523 | Microsoft Exchange Server +5 | Critical 9.0 | Known | 2 | Yes | 1.000 (100.0th percentile) | Microsoft Exchange Server Elevation of Privilege Vulnerability | ||
CVE-2021-34473 | Microsoft Exchange Server +5 | Critical 9.1 | Known | 11 | Yes | 1.000 (100.0th percentile) | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
CVE-2021-34448 | Microsoft Windows 10 1507 +28 | Medium 6.8 | — | 0 | — | 0.401 (98.6th percentile) | Scripting Engine Memory Corruption Vulnerability | ||
CVE-2021-33771 | Microsoft Windows 10 1507 +29 | High 7.8 | — | 0 | — | 0.102 (95.7th percentile) | Windows Kernel Elevation of Privilege Vulnerability | ||
CVE-2021-33742 | Microsoft Windows 10 1507 +30 | High 7.5 | — | 0 | — | 0.594 (99.1th percentile) | Windows MSHTML Platform Remote Code Execution Vulnerability | ||
CVE-2021-33739 | Microsoft Windows 10 1909 +11 | High 8.4 | — | 2 | — | 0.066 (93.9th percentile) | Microsoft DWM Core Library Elevation of Privilege Vulnerability | ||
CVE-2021-31979 | Microsoft Windows 10 1507 +39 | High 7.8 | — | 0 | — | 0.045 (91.6th percentile) | Windows Kernel Elevation of Privilege Vulnerability | ||
CVE-2021-31956 | Microsoft Windows 10 1507 +40 | High 7.8 | — | 5 | — | 0.223 (97.7th percentile) | Windows NTFS Elevation of Privilege Vulnerability | ||
CVE-2021-31955 | Microsoft Windows 10 1809 +16 | Medium 5.5 | — | 2 | — | 0.811 (99.6th percentile) | Windows Kernel Information Disclosure Vulnerability | ||
CVE-2021-31755 | — | Critical 9.8 | — | 0 | — | 0.865 (99.7th percentile) | An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. | ||
CVE-2021-31207 | Microsoft Exchange Server +5 | Medium 6.6 | Known | 0 | Yes | 0.998 (100.0th percentile) | Microsoft Exchange Server Security Feature Bypass Vulnerability | ||
CVE-2021-31201 | Microsoft Windows 10 1507 +40 | Medium 5.2 | — | 0 | — | 0.026 (85.6th percentile) | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | ||
CVE-2021-31199 | Microsoft Windows 10 1507 +40 | Medium 5.2 | — | 0 | — | 0.030 (87.4th percentile) | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability | ||
CVE-2021-30869 | Apple iOS And Ipados +4 | High 7.8 | — | 0 | — | 0.042 (91.0th percentile) | A type confusion issue was addressed with improved state handling. | ||
CVE-2021-30860 | Apple iOS +7 | High 7.8 | — | 2 | — | 0.760 (99.5th percentile) | An integer overflow was addressed with improved input validation. | ||
CVE-2021-30858 | Apple iOS +5 | High 8.8 | — | 2 | — | 0.134 (96.5th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2021-30807 | Apple Ipados +3 | High 7.8 | — | 2 | — | 0.288 (98.2th percentile) | A memory corruption issue was addressed with improved memory handling. | ||
CVE-2021-30762 | Apple iOS +1 | High 8.8 | — | 0 | — | 0.110 (95.9th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2021-30761 | Apple iOS +1 | High 8.8 | — | 0 | — | 0.105 (95.8th percentile) | A memory corruption issue was addressed with improved state management. | ||
CVE-2021-30713 | Apple macOS +1 | High 7.8 | — | 0 | — | 0.070 (94.2th percentile) | A permissions issue was addressed with improved validation. | ||
CVE-2021-30666 | Apple iOS +1 | High 8.8 | — | 0 | — | 0.030 (87.3th percentile) | A buffer overflow issue was addressed with improved memory handling. | ||
CVE-2021-30665 | Apple Ipados +4 | High 8.8 | — | 0 | — | 0.037 (89.8th percentile) | A memory corruption issue was addressed with improved state management. | ||
CVE-2021-30663 | Apple Ipados +4 | High 8.8 | — | 0 | — | 0.035 (89.3th percentile) | An integer overflow was addressed with improved input validation. | ||
CVE-2021-30661 | Apple iOS And Ipados +6 | High 8.8 | — | 0 | — | 0.045 (91.6th percentile) | A use after free issue was addressed with improved memory management. | ||
CVE-2021-30657 | Apple macOS +1 | Medium 5.5 | — | 1 | Yes | 0.685 (99.3th percentile) | A logic issue was addressed with improved state management. | ||
CVE-2021-30633 | Fedoraproject Fedora +1 | Critical 9.6 | — | 0 | — | 0.332 (98.4th percentile) | Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML p… | ||
CVE-2021-30632 | Fedoraproject Fedora +1 | High 8.8 | — | 4 | — | 0.632 (99.2th percentile) | Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-30563 | Google Chrome | High 8.8 | — | 1 | — | 0.090 (95.3th percentile) | Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-30554 | Fedoraproject Fedora +1 | High 8.8 | — | 0 | — | 0.074 (94.5th percentile) | Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-30551 | Fedoraproject Fedora +1 | High 8.8 | — | 1 | — | 0.647 (99.2th percentile) | Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-30116 | Kaseya Vsa Agent +2 | Critical 10.0 | Known | 0 | — | 0.857 (99.7th percentile) | Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. | ||
CVE-2021-28664 | Arm Bifrost GPU Kernel Driver +3 | High 8.8 | — | 1 | — | 0.055 (92.8th percentile) | The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. | ||
CVE-2021-28663 | Arm Bifrost GPU Kernel Driver +3 | High 8.8 | — | 1 | — | 0.121 (96.2th percentile) | The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. | ||
CVE-2021-28550 | Adobe Acrobat +4 | High 8.8 | — | 0 | — | 0.521 (99.0th percentile) | Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. | ||
CVE-2021-28310 | Microsoft Windows 10 1803 +18 | High 7.8 | — | 1 | — | 0.084 (95.0th percentile) | Win32k Elevation of Privilege Vulnerability | ||
CVE-2021-27562 | — | Medium 5.5 | — | 0 | — | 0.031 (87.7th percentile) | In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mod… | ||
CVE-2021-27561 | — | Critical 9.8 | — | 0 | — | 0.836 (99.7th percentile) | Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. | ||
CVE-2021-27104 | Accellion Fta +1 | Critical 9.8 | Known | 0 | — | 0.567 (99.1th percentile) | Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. | ||
CVE-2021-27103 | Accellion Fta +1 | Critical 9.8 | Known | 0 | — | 0.114 (96.0th percentile) | Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. | ||
CVE-2021-27102 | Accellion Fta +1 | High 7.8 | Known | 0 | — | 0.037 (89.7th percentile) | Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. | ||
CVE-2021-27101 | Accellion Fta +1 | Critical 9.8 | Known | 1 | — | 0.060 (93.4th percentile) | Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. | ||
CVE-2021-27085 | Microsoft Internet Explorer +1 | High 8.8 | — | 0 | — | 0.054 (92.8th percentile) | Internet Explorer Remote Code Execution Vulnerability | ||
CVE-2021-27065 | Microsoft Exchange Server +25 | High 7.8 | Known | 2 | Yes | 0.999 (100.0th percentile) | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
CVE-2021-27059 | Microsoft Microsoft Office 2010 Service Pack 2 +4 | High 7.6 | — | 0 | — | 0.061 (93.5th percentile) | Microsoft Office Remote Code Execution Vulnerability | ||
CVE-2021-26858 | Microsoft Exchange Server +24 | High 7.8 | Known | 0 | — | 0.937 (99.8th percentile) | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
CVE-2021-26857 | Microsoft Exchange Server +26 | High 7.8 | Known | 1 | — | 0.958 (99.9th percentile) | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
CVE-2021-26855 | Microsoft Exchange Server +24 | Critical 9.1 | Known | 68 | Yes | 1.000 (100.0th percentile) | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
CVE-2021-26411 | Microsoft Edge +4 | High 8.8 | Known | 1 | — | 0.817 (99.6th percentile) | Internet Explorer Memory Corruption Vulnerability | ||
CVE-2021-26084 | Atlassian Confluence Data Center +3 | Critical 9.8 | Known | 57 | Yes | 1.000 (100.0th percentile) | In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data… | ||
CVE-2021-23874 | McAfee Total Protection +1 | High 8.2 | — | 0 | — | 0.011 (65.1th percentile) | Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense. | ||
CVE-2021-22986 | F5 Big-Ip Access Policy Manager +15 | Critical 9.8 | Known | 18 | Yes | 0.999 (100.0th percentile) | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0… | ||
CVE-2021-22900 | Ivanti Connect Secure +2 | High 7.2 | — | 0 | — | 0.141 (96.6th percentile) | A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archi… | ||
CVE-2021-22899 | Ivanti Connect Secure +1 | High 8.8 | — | 0 | — | 0.229 (97.8th percentile) | A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature | ||
CVE-2021-22894 | Ivanti Connect Secure +1 | High 8.8 | — | 0 | — | 0.413 (98.7th percentile) | A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room. | ||
CVE-2021-22893 | Ivanti Connect Secure +1 | Critical 10.0 | Known | 7 | — | 0.475 (98.9th percentile) | Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect… | ||
CVE-2021-22506 | Microfocus Access Manager +1 | High 7.5 | — | 0 | — | 0.257 (98.0th percentile) | Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. | ||
CVE-2021-22502 | Microfocus Operation Bridge Reporter +1 | Critical 9.8 | — | 0 | Yes | 0.967 (99.9th percentile) | Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. | ||
CVE-2021-22205 | GitLab GitLab | Critical 10.0 | Known | 38 | Yes | 0.997 (100.0th percentile) | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. | ||
CVE-2021-22005 | VMware Vcenter Server, VMware Cloud Foundation +2 | Critical 9.8 | Known | 15 | Yes | 1.000 (100.0th percentile) | The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. | ||
CVE-2021-21985 | VMware Vcenter Server And VMware Cloud Foundation +2 | Critical 9.8 | Known | 12 | Yes | 1.000 (100.0th percentile) | The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. | ||
CVE-2021-21972 | VMware Cloud Foundation +3 | Critical 9.8 | Known | 35 | Yes | 0.999 (100.0th percentile) | The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. | ||
CVE-2021-21224 | Debian Debian Linux +2 | High 8.8 | — | 3 | — | 0.842 (99.7th percentile) | Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. | ||
CVE-2021-21220 | Fedoraproject Fedora +1 | High 8.8 | — | 6 | Yes | 0.704 (99.4th percentile) | Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-21206 | Fedoraproject Fedora +1 | High 8.8 | — | 0 | — | 0.093 (95.4th percentile) | Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-21193 | Debian Debian Linux +2 | High 8.8 | — | 1 | — | 0.100 (95.6th percentile) | Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-21166 | Debian Debian Linux +2 | High 8.8 | — | 0 | — | 0.240 (97.9th percentile) | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-21148 | Debian Debian Linux +2 | High 8.8 | — | 1 | — | 0.200 (97.5th percentile) | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
CVE-2021-21017 | Adobe Acrobat +4 | High 8.8 | — | 2 | — | 0.863 (99.7th percentile) | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. | ||
CVE-2021-20090 | Buffalo Wsr-2533dhp3-Bk Firmware +2 | Critical 9.8 | — | 0 | — | 1.000 (100.0th percentile) | A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass… | ||
CVE-2021-20023 | SonicWall Email Security +11 | Medium 4.9 | Known | 0 | — | 0.517 (99.0th percentile) | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. | ||
CVE-2021-20022 | SonicWall Email Security +11 | High 7.2 | Known | 0 | — | 0.166 (97.0th percentile) | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. | ||
CVE-2021-20021 | SonicWall Email Security +11 | Critical 9.8 | Known | 1 | — | 0.888 (99.8th percentile) | A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. | ||
CVE-2021-20016 | SonicWall Sma 100 Firmware +6 | Critical 9.8 | Known | 0 | — | 0.400 (98.6th percentile) | A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. | ||
CVE-2021-1906 | Qualcomm Apq8009 Firmware +400 | Medium 6.2 | — | 0 | — | 0.005 (44.5th percentile) | Improper handling of address deregistration on failure can lead to new GPU address allocation failure. | ||
CVE-2021-1905 | Qualcomm Apq8009 Firmware +396 | High 8.4 | — | 3 | — | 0.015 (75.2th percentile) | Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. | ||
CVE-2021-1879 | Apple iOS +4 | Medium 6.1 | — | 0 | — | 0.071 (94.3th percentile) | This issue was addressed by improved management of object lifetimes. | ||
CVE-2021-1871 | Apple iOS And Ipados +6 | Critical 9.8 | — | 0 | — | 0.070 (94.2th percentile) | A logic issue was addressed with improved restrictions. | ||
CVE-2021-1870 | Apple iOS And Ipados +6 | Critical 9.8 | — | 0 | — | 0.077 (94.7th percentile) | A logic issue was addressed with improved restrictions. | ||
CVE-2021-1782 | Apple iOS And Ipados +6 | High 7.0 | — | 2 | — | 0.022 (82.8th percentile) | A race condition was addressed with improved locking. | ||
CVE-2021-1732 | Microsoft Windows 10 1803 +18 | High 7.8 | Known | 21 | Yes | 0.784 (99.6th percentile) | Windows Win32k Elevation of Privilege Vulnerability | ||
CVE-2021-1675 | Microsoft Windows 10 1507 +39 | High 7.8 | Known | 57 | Yes | 0.853 (99.7th percentile) | Windows Print Spooler Remote Code Execution Vulnerability | ||
CVE-2021-1647 | Microsoft Microsoft Security Essentials +7 | High 7.8 | — | 2 | — | 0.397 (98.6th percentile) | Microsoft Defender Remote Code Execution Vulnerability | ||
CVE-2021-1498 | Cisco Cisco Hyperflex Hx Data Platform +1 | Critical 9.8 | — | 0 | Yes | 1.000 (100.0th percentile) | Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. | ||
CVE-2021-1497 | Cisco Cisco Hyperflex Hx Data Platform +1 | Critical 9.8 | — | 0 | Yes | 0.999 (100.0th percentile) | Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. |