2021 CVEs (page 206)
Page 206 of 226 — CVEs published in 2021, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26776 | Medium | 5.4 | 2021-03-11 | CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name. |
CVE-2021-21381 | High | 7.1 | 2021-03-11 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2… |
CVE-2021-27085 | High | 8.8 | 2021-03-11 | Internet Explorer Remote Code Execution Vulnerability |
CVE-2021-27084 | High | 7.8 | 2021-03-11 | Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability |
CVE-2021-27083 | High | 7.8 | 2021-03-11 | Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability |
CVE-2021-27082 | High | 7.8 | 2021-03-11 | Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability |
CVE-2021-27081 | High | 7.8 | 2021-03-11 | Visual Studio Code ESLint Extension Remote Code Execution Vulnerability |
CVE-2021-27080 | Critical | 9.3 | 2021-03-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2021-27077 | High | 7.8 | 2021-03-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2021-27076 | High | 8.8 | 2021-03-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2021-27075 | Medium | 6.8 | 2021-03-11 | Azure Virtual Machine Information Disclosure Vulnerability |
CVE-2021-27074 | Medium | 6.2 | 2021-03-11 | Azure Sphere Unsigned Code Execution Vulnerability |
CVE-2021-27070 | High | 7.3 | 2021-03-11 | Windows 10 Update Assistant Elevation of Privilege Vulnerability |
CVE-2021-27066 | Medium | 4.3 | 2021-03-11 | Windows Admin Center Security Feature Bypass Vulnerability |
CVE-2021-27063 | High | 7.5 | 2021-03-11 | Windows DNS Server Denial of Service Vulnerability |
CVE-2021-27062 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-27061 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-27060 | High | 7.8 | 2021-03-11 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2021-27059 | High | 7.6 | 2021-03-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-27058 | High | 7.8 | 2021-03-11 | Microsoft Office ClickToRun Remote Code Execution Vulnerability |
CVE-2021-27057 | High | 7.8 | 2021-03-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-27056 | High | 7.8 | 2021-03-11 | Microsoft PowerPoint Remote Code Execution Vulnerability |
CVE-2021-27055 | High | 7.0 | 2021-03-11 | Microsoft Visio Security Feature Bypass Vulnerability |
CVE-2021-27054 | High | 7.8 | 2021-03-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-27053 | High | 7.8 | 2021-03-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2021-27052 | Medium | 5.3 | 2021-03-11 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2021-27051 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-27050 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-27049 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-27048 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-27047 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-26902 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-26901 | High | 7.8 | 2021-03-11 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-26900 | High | 7.8 | 2021-03-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2021-26899 | High | 7.8 | 2021-03-11 | Windows UPnP Device Host Elevation of Privilege Vulnerability |
CVE-2021-26898 | High | 7.8 | 2021-03-11 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-26897 | Critical | 9.8 | 2021-03-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-26896 | High | 7.5 | 2021-03-11 | Windows DNS Server Denial of Service Vulnerability |
CVE-2021-26895 | Critical | 9.8 | 2021-03-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-26894 | Critical | 9.8 | 2021-03-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-26893 | Critical | 9.8 | 2021-03-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-26892 | Medium | 6.2 | 2021-03-11 | Windows Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2021-26891 | High | 7.8 | 2021-03-11 | Windows Container Execution Agent Elevation of Privilege Vulnerability |
CVE-2021-26890 | High | 7.8 | 2021-03-11 | Application Virtualization Remote Code Execution Vulnerability |
CVE-2021-26889 | High | 7.8 | 2021-03-11 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2021-26887 | High | 7.8 | 2021-03-11 | <p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file… |
CVE-2021-26886 | Medium | 6.1 | 2021-03-11 | User Profile Service Denial of Service Vulnerability |
CVE-2021-26885 | High | 7.8 | 2021-03-11 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-26884 | Medium | 5.5 | 2021-03-11 | Windows Media Photo Codec Information Disclosure Vulnerability |
CVE-2021-26882 | High | 7.8 | 2021-03-11 | Remote Access API Elevation of Privilege Vulnerability |
CVE-2021-26881 | High | 7.5 | 2021-03-11 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
CVE-2021-26880 | High | 7.8 | 2021-03-11 | Storage Spaces Controller Elevation of Privilege Vulnerability |
CVE-2021-26879 | High | 7.5 | 2021-03-11 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2021-26878 | High | 7.8 | 2021-03-11 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2021-26877 | Critical | 9.8 | 2021-03-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2021-26876 | High | 8.8 | 2021-03-11 | OpenType Font Parsing Remote Code Execution Vulnerability |
CVE-2021-26875 | High | 7.8 | 2021-03-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2021-26874 | High | 7.8 | 2021-03-11 | Windows Overlay Filter Elevation of Privilege Vulnerability |
CVE-2021-26873 | High | 7.0 | 2021-03-11 | Windows User Profile Service Elevation of Privilege Vulnerability |
CVE-2021-26872 | High | 7.8 | 2021-03-11 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-26871 | High | 7.8 | 2021-03-11 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-26870 | High | 7.8 | 2021-03-11 | Windows Projected File System Elevation of Privilege Vulnerability |
CVE-2021-26869 | Medium | 5.5 | 2021-03-11 | Windows ActiveX Installer Service Information Disclosure Vulnerability |
CVE-2021-26868 | High | 7.8 | 2021-03-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2021-26867 | Critical | 9.9 | 2021-03-11 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2021-26866 | High | 7.1 | 2021-03-11 | Windows Update Service Elevation of Privilege Vulnerability |
CVE-2021-26865 | High | 8.8 | 2021-03-11 | Windows Container Execution Agent Elevation of Privilege Vulnerability |
CVE-2021-26864 | High | 8.4 | 2021-03-11 | Windows Virtual Registry Provider Elevation of Privilege Vulnerability |
CVE-2021-26863 | High | 7.0 | 2021-03-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2021-26862 | High | 7.0 | 2021-03-11 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2021-26861 | High | 7.8 | 2021-03-11 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2021-26860 | High | 7.8 | 2021-03-11 | Windows App-V Overlay Filter Elevation of Privilege Vulnerability |
CVE-2021-26859 | High | 7.7 | 2021-03-11 | Microsoft Power BI Information Disclosure Vulnerability |
CVE-2021-26411 | High | 8.8 | 2021-03-11 | Internet Explorer Memory Corruption Vulnerability |
CVE-2021-24110 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-24108 | High | 7.8 | 2021-03-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2021-24107 | Medium | 5.5 | 2021-03-11 | Windows Event Tracing Information Disclosure Vulnerability |
CVE-2021-24104 | Medium | 4.6 | 2021-03-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-24095 | High | 7.0 | 2021-03-11 | DirectX Elevation of Privilege Vulnerability |
CVE-2021-24090 | High | 7.8 | 2021-03-11 | Windows Error Reporting Elevation of Privilege Vulnerability |
CVE-2021-24089 | High | 7.8 | 2021-03-11 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2021-20336 | Medium | 5.4 | 2021-03-11 | IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2021-1729 | High | 7.1 | 2021-03-11 | Windows Update Stack Setup Elevation of Privilege Vulnerability |
CVE-2021-1640 | High | 7.8 | 2021-03-11 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2021-28132 | Critical | 9.8 | 2021-03-11 | LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload o… |
CVE-2021-21378 | High | 8.2 | 2021-03-11 | Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token wit… |
CVE-2021-21364 | Medium | 5.3 | 2021-03-11 | swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different language… |
CVE-2021-21363 | Medium | 5.3 | 2021-03-11 | swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different language… |
CVE-2021-28134 | Critical | 9.8 | 2021-03-11 | Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, whi… |
CVE-2021-27919 | Medium | 5.5 | 2021-03-11 | archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in whi… |
CVE-2021-27918 | High | 7.5 | 2021-03-11 | encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of a… |
CVE-2021-21375 | Medium | 6.5 | 2021-03-10 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN… |
CVE-2021-21371 | Medium | 5.0 | 2021-03-10 | Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Tasks and sub-tasks based on the vulnerabil… |
CVE-2021-21334 | Medium | 6.3 | 2021-03-10 | In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through K… |
CVE-2021-21265 | Medium | 6.8 | 2021-03-10 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1.1.2, when running on poorly configured… |
CVE-2021-3034 | Medium | 5.1 | 2021-03-10 | An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integrati… |
CVE-2021-21772 | High | 8.1 | 2021-03-10 | A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file ca… |
CVE-2021-20205 | Medium | 6.5 | 2021-03-10 | Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image. |
CVE-2021-0465 | High | 7.8 | 2021-03-10 | In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with… |
CVE-2021-0464 | High | 7.8 | 2021-03-10 | In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privi… |