2021 CVEs (page 154)
Page 154 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34525 | High | 8.8 | 2021-07-14 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-34523 | Critical | 9.0 | 2021-07-14 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2021-34522 | High | 7.8 | 2021-07-14 | Microsoft Defender Remote Code Execution Vulnerability |
CVE-2021-34521 | High | 7.8 | 2021-07-14 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2021-34520 | High | 8.1 | 2021-07-14 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2021-34519 | Medium | 5.3 | 2021-07-14 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2021-34518 | High | 7.8 | 2021-07-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-34517 | Medium | 5.3 | 2021-07-14 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-34516 | High | 7.8 | 2021-07-14 | Win32k Elevation of Privilege Vulnerability |
CVE-2021-34514 | High | 7.8 | 2021-07-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-34513 | High | 7.8 | 2021-07-14 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-34512 | High | 7.8 | 2021-07-14 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-34511 | High | 7.8 | 2021-07-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2021-34510 | High | 7.8 | 2021-07-14 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-34509 | Medium | 5.5 | 2021-07-14 | Storage Spaces Controller Information Disclosure Vulnerability |
CVE-2021-34508 | High | 8.8 | 2021-07-14 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2021-34507 | Medium | 6.5 | 2021-07-14 | Windows Remote Assistance Information Disclosure Vulnerability |
CVE-2021-34504 | High | 7.8 | 2021-07-14 | Windows Address Book Remote Code Execution Vulnerability |
CVE-2021-34503 | High | 7.8 | 2021-07-14 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
CVE-2021-34501 | High | 7.8 | 2021-07-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-34500 | Medium | 6.3 | 2021-07-14 | Windows Kernel Memory Information Disclosure Vulnerability |
CVE-2021-34499 | Medium | 6.5 | 2021-07-14 | Windows DNS Server Denial of Service Vulnerability |
CVE-2021-34498 | High | 7.8 | 2021-07-14 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2021-34497 | Medium | 6.8 | 2021-07-14 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2021-34496 | Medium | 5.5 | 2021-07-14 | Windows GDI Information Disclosure Vulnerability |
CVE-2021-34494 | High | 8.8 | 2021-07-14 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-34493 | Medium | 6.7 | 2021-07-14 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
CVE-2021-34492 | High | 8.1 | 2021-07-14 | Windows Certificate Spoofing Vulnerability |
CVE-2021-34491 | Medium | 5.5 | 2021-07-14 | Win32k Information Disclosure Vulnerability |
CVE-2021-34490 | High | 7.5 | 2021-07-14 | Windows TCP/IP Driver Denial of Service Vulnerability |
CVE-2021-34489 | High | 7.8 | 2021-07-14 | DirectWrite Remote Code Execution Vulnerability |
CVE-2021-34488 | High | 7.8 | 2021-07-14 | Windows Console Driver Elevation of Privilege Vulnerability |
CVE-2021-34479 | High | 7.8 | 2021-07-14 | Microsoft Visual Studio Spoofing Vulnerability |
CVE-2021-34477 | High | 7.8 | 2021-07-14 | Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability |
CVE-2021-34476 | High | 7.5 | 2021-07-14 | Bowser.sys Denial of Service Vulnerability |
CVE-2021-34474 | High | 8.0 | 2021-07-14 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability |
CVE-2021-34473 | Critical | 9.1 | 2021-07-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-34470 | High | 8.0 | 2021-07-14 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2021-34469 | High | 8.2 | 2021-07-14 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2021-34468 | High | 7.1 | 2021-07-14 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2021-33788 | High | 7.5 | 2021-07-14 | Windows LSA Denial of Service Vulnerability |
CVE-2021-33786 | High | 8.1 | 2021-07-14 | Windows LSA Security Feature Bypass Vulnerability |
CVE-2021-33785 | High | 7.5 | 2021-07-14 | Windows AF_UNIX Socket Provider Denial of Service Vulnerability |
CVE-2021-33784 | High | 7.8 | 2021-07-14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2021-33783 | Medium | 6.5 | 2021-07-14 | Windows SMB Information Disclosure Vulnerability |
CVE-2021-33782 | Medium | 5.5 | 2021-07-14 | Windows Authenticode Spoofing Vulnerability |
CVE-2021-33781 | High | 8.1 | 2021-07-14 | Azure AD Security Feature Bypass Vulnerability |
CVE-2021-33780 | High | 8.8 | 2021-07-14 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-33779 | High | 8.1 | 2021-07-14 | Windows AD FS Security Feature Bypass Vulnerability |
CVE-2021-33778 | High | 7.8 | 2021-07-14 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-33777 | High | 7.8 | 2021-07-14 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-33776 | High | 7.8 | 2021-07-14 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-33775 | High | 7.8 | 2021-07-14 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-33774 | High | 7.0 | 2021-07-14 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-33773 | High | 7.8 | 2021-07-14 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2021-33772 | High | 7.5 | 2021-07-14 | Windows TCP/IP Driver Denial of Service Vulnerability |
CVE-2021-33771 | High | 7.8 | 2021-07-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-33768 | High | 8.0 | 2021-07-14 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2021-33767 | High | 8.2 | 2021-07-14 | Open Enclave SDK Elevation of Privilege Vulnerability |
CVE-2021-33766 | High | 7.3 | 2021-07-14 | Microsoft Exchange Server Information Disclosure Vulnerability |
CVE-2021-33765 | Medium | 6.2 | 2021-07-14 | Windows Installer Spoofing Vulnerability |
CVE-2021-33764 | Medium | 5.9 | 2021-07-14 | Windows Key Distribution Center Information Disclosure Vulnerability |
CVE-2021-33763 | Medium | 5.5 | 2021-07-14 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2021-33761 | High | 7.8 | 2021-07-14 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2021-33760 | Medium | 5.5 | 2021-07-14 | Media Foundation Information Disclosure Vulnerability |
CVE-2021-33759 | High | 7.8 | 2021-07-14 | Windows Desktop Bridge Elevation of Privilege Vulnerability |
CVE-2021-33758 | High | 7.7 | 2021-07-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2021-33757 | Medium | 5.3 | 2021-07-14 | Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability |
CVE-2021-33756 | High | 8.8 | 2021-07-14 | Windows DNS Snap-in Remote Code Execution Vulnerability |
CVE-2021-33755 | Medium | 6.3 | 2021-07-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2021-33754 | High | 8.0 | 2021-07-14 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-33753 | Medium | 4.7 | 2021-07-14 | Microsoft Bing Search Spoofing Vulnerability |
CVE-2021-33752 | High | 8.8 | 2021-07-14 | Windows DNS Snap-in Remote Code Execution Vulnerability |
CVE-2021-33751 | High | 7.0 | 2021-07-14 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-33750 | High | 8.8 | 2021-07-14 | Windows DNS Snap-in Remote Code Execution Vulnerability |
CVE-2021-33749 | High | 8.8 | 2021-07-14 | Windows DNS Snap-in Remote Code Execution Vulnerability |
CVE-2021-33746 | High | 8.0 | 2021-07-14 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-33745 | Medium | 6.5 | 2021-07-14 | Windows DNS Server Denial of Service Vulnerability |
CVE-2021-33744 | Medium | 5.3 | 2021-07-14 | Windows Secure Kernel Mode Security Feature Bypass Vulnerability |
CVE-2021-33743 | High | 7.8 | 2021-07-14 | Windows Projected File System Elevation of Privilege Vulnerability |
CVE-2021-33740 | High | 7.8 | 2021-07-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2021-31984 | High | 7.6 | 2021-07-14 | Power BI Remote Code Execution Vulnerability |
CVE-2021-31979 | High | 7.8 | 2021-07-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-31961 | Medium | 6.1 | 2021-07-14 | Windows InstallService Elevation of Privilege Vulnerability |
CVE-2021-31947 | High | 7.8 | 2021-07-14 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-31206 | High | 7.6 | 2021-07-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-31196 | High | 7.2 | 2021-07-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-31183 | High | 7.5 | 2021-07-14 | Windows TCP/IP Driver Denial of Service Vulnerability |
CVE-2021-36740 | Medium | 6.5 | 2021-07-14 | Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Va… |
CVE-2021-31859 | High | 7.8 | 2021-07-14 | Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the executable file via an… |
CVE-2021-23407 | High | 7.5 | 2021-07-14 | This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file… |
CVE-2021-36716 | High | 7.5 | 2021-07-14 | A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide cra… |
CVE-2021-22782 | Medium | 5.5 | 2021-07-14 | Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro)… |
CVE-2021-22781 | Medium | 5.5 | 2021-07-14 | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro)… |
CVE-2021-22780 | High | 7.1 | 2021-07-14 | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro)… |
CVE-2021-22779 | Critical | 9.1 | 2021-07-14 | Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), Ec… |
CVE-2021-22778 | High | 7.1 | 2021-07-14 | Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro)… |
CVE-2021-35527 | High | 7.5 | 2021-07-14 | Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows attacker to gain access to user credentials t… |
CVE-2021-33213 | Medium | 6.5 | 2021-07-14 | An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files fro… |
CVE-2021-33212 | Medium | 5.4 | 2021-07-14 | A Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to inject arb… |