VIR Vulnerability Intelligence Relay

CVEs from 2021

6,232 normalized CVEs published or assigned in this year.

Total
6,232
critical
critical 273
high
high 975
medium
medium 1,141
low
low 135
% Critical
4.4%
% with KEV
3.4%
% with exploit
3.4%

Top vendors

Top products

  • office 13
  • 365_apps 6
  • office_long_term_servicing_channel 6
  • library_automation_system 5
  • single_connect 4
  • http_server 3
  • solidfire 2
  • student_information_management_system 2

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2021-39873 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21108 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21222 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-22181 high — 8.0 — multiple issues in gitlab arch
CVE-2021-37960 high — 8.0 — multiple issues in chromium arch
CVE-2021-30618 high — 8.0 — Chromium: CVE-2021-30618 Inappropriate implementation in DevTools archdebian
CVE-2021-21170 high — 8.0 — Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted … archdebian
CVE-2021-39897 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21107 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21191 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-39891 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21153 high — 8.0 — Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. archdebian
CVE-2021-39887 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21116 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21192 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-26925 high — 8.0 — Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering. archdebian
CVE-2021-25217 high — 8.0 — Important: dhcp security update archsusedebianrockylinux
CVE-2021-20247 high — 8.0 — A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailb… archdebian
CVE-2021-39898 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21212 high — 8.0 — Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP. archdebian
CVE-2021-21164 high — 8.0 — Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. archdebian
CVE-2021-30609 high — 8.0 — Chromium: CVE-2021-30609 Use after free in Sign-In archdebian
CVE-2021-29982 high — 8.0 — Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. This vulnerability affects Firefox < 91 an… archdebian
CVE-2021-2264 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows low pr… archdebian
CVE-2021-30510 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-23971 high — 8.0 — When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the… archsusedebian
CVE-2021-39899 high — 8.0 — multiple issues in gitlab arch
CVE-2021-38496 high — 8.0 — During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbir… archdebianrockylinux
CVE-2021-36952 high — 8.0 — multiple issues in code arch
CVE-2021-43534 high — 8.0 — Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence of memory corruption and we presume that with enoug… debianrockylinux
CVE-2021-29428 high — 8.0 — In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds c… archsusedebian
CVE-2021-43535 high — 8.0 — A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firef… debianrockylinux
CVE-2021-22167 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39902 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30615 high — 8.0 — Chromium: CVE-2021-30615 Cross-origin data leak in Navigation archdebian
CVE-2021-21165 high — 8.0 — Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-39945 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39882 high — 8.0 — multiple issues in gitlab arch
CVE-2021-24000 high — 8.0 — A race condition with requestPointerLock() and setTimeout() could have resulted in a user interacting with one tab when they believed they were on a separate tab. In conjunction with certain elements… archsusedebian
CVE-2021-21113 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-28477 high — 8.0 — arbitrary code execution in code arch
CVE-2021-30608 high — 8.0 — Chromium: CVE-2021-30608 Use after free in Web Share archdebian
CVE-2021-21112 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21106 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-43396 high — 8.0 — In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an inter… archsusedebian
CVE-2021-21150 high — 8.0 — Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… archdebian
CVE-2021-37980 high — 8.0 — Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows. archdebian
CVE-2021-21208 high — 8.0 — Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code. archdebian
CVE-2021-25216 high — 8.0 — In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of t… debianarchsuse
CVE-2021-39934 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39903 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39936 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39932 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21216 high — 8.0 — Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page. archdebian
CVE-2021-21162 high — 8.0 — Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21156 high — 8.0 — Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script. archdebian
CVE-2021-29959 high — 8.0 — When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website from re-enabling it without an additional prompt. This was only… archdebian
CVE-2021-21111 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21115 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-22219 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22915 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-25215 high — 8.0 — Important: bind security update debianarchsuserockylinux
CVE-2021-22214 high — 8.0 — multiple issues in gitlab arch
CVE-2021-29960 high — 8.0 — Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion techniques combined … archdebian
CVE-2021-29962 high — 8.0 — Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnera… archdebian
CVE-2021-29961 high — 8.0 — When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface. This vulnerability affects Firefox < 89. archdebian
CVE-2021-21114 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29965 high — 8.0 — A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that… archdebian
CVE-2021-21223 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21225 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30511 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30542 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21226 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39909 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30512 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21110 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4059 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29972 high — 8.0 — A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediated other, unknown security vulnerabilit… archsusedebian
CVE-2021-22218 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39886 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39872 high — 8.0 — multiple issues in gitlab arch
CVE-2021-4093 high — 8.0 — A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host ker… rockylinuxdebian
CVE-2021-38021 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4065 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4068 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30584 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30579 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30582 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30573 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30571 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30572 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30567 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30559 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30555 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30569 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30564 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30568 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30566 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30565 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30541 high — 8.0 — arbitrary code execution in chromium archdebian