VIR Vulnerability Intelligence Relay

CVEs from 2021

6,232 normalized CVEs published or assigned in this year.

Total
6,232
critical
critical 273
high
high 975
medium
medium 1,141
low
low 135
% Critical
4.4%
% with KEV
3.4%
% with exploit
3.4%

Top vendors

Top products

  • office 13
  • 365_apps 6
  • office_long_term_servicing_channel 6
  • library_automation_system 5
  • single_connect 4
  • http_server 3
  • solidfire 2
  • student_information_management_system 2

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2021-30576 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30584 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30579 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30582 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30573 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30571 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30572 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30567 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30559 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30555 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-38011 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30569 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30564 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30568 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30566 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30565 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30541 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-37985 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30561 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30556 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30562 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-37986 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30557 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30537 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30523 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30520 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4063 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21113 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37984 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38017 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29961 high — 8.0 — When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox < 89. archdebian
CVE-2021-22239 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22209 high — 8.0 — multiple issues in gitlab arch
CVE-2021-37987 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37981 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4052 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37988 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37989 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4057 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30542 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37991 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30511 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37990 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4066 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30512 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30514 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37996 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21226 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21225 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21223 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21111 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30507 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21222 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30509 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21192 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-21116 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21191 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-21115 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21114 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21106 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37998 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21112 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21110 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21109 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21108 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21107 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37982 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4058 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30630 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-21172 high — 8.0 — Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. archdebian
CVE-2021-30594 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4061 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30575 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21171 high — 8.0 — Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. archdebian
CVE-2021-30627 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-26925 high — 8.0 — Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering. archdebian
CVE-2021-30593 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29971 high — 8.0 — If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespective of scheme or port - would be granted that permission. *This bug only affects … archdebian
CVE-2021-30589 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38013 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30578 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30608 high — 8.0 — Chromium: CVE-2021-30608 Use after free in Web Share archdebian
CVE-2021-30609 high — 8.0 — Chromium: CVE-2021-30609 Use after free in Sign-In archdebian
CVE-2021-38371 high — 8.0 — The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending. archdebian
CVE-2021-30618 high — 8.0 — Chromium: CVE-2021-30618 Inappropriate implementation in DevTools archdebian
CVE-2021-30626 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-21208 high — 8.0 — Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code. archdebian
CVE-2021-21150 high — 8.0 — Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… archdebian
CVE-2021-21216 high — 8.0 — Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page. archdebian
CVE-2021-30597 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21153 high — 8.0 — Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. archdebian
CVE-2021-21156 high — 8.0 — Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script. archdebian
CVE-2021-21212 high — 8.0 — Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP. archdebian
CVE-2021-21162 high — 8.0 — Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21165 high — 8.0 — Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21164 high — 8.0 — Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. archdebian
CVE-2021-21168 high — 8.0 — Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. archdebian
CVE-2021-21199 high — 8.0 — Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML pa… archdebian
CVE-2021-30588 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4062 high — 8.0 — multiple issues in chromium archdebian