VIR Vulnerability Intelligence Relay

CVEs from 2021

6,087 normalized CVEs published or assigned in this year.

Total
6,087
critical
critical 273
high
high 975
medium
medium 1,141
low
low 135
% Critical
4.5%
% with KEV
3.5%
% with exploit
3.5%

Top vendors

Top products

  • office 13
  • 365_apps 6
  • office_long_term_servicing_channel 6
  • library_automation_system 5
  • single_connect 4
  • http_server 3
  • solidfire 2
  • student_information_management_system 2

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2021-30572 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29428 high — 8.0 — In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds c… archsusedebian
CVE-2021-31618 high — 8.0 — denial of service in apache debianarchsuse
CVE-2021-30582 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21211 high — 8.0 — Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. archdebian
CVE-2021-30624 high — 8.0 — Chromium: CVE-2021-30624 Use after free in Autofill archdebian
CVE-2021-30602 high — 8.0 — Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-22230 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30567 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39887 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30559 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-29980 high — 8.0 — Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunder… archsusedebianrockylinux
CVE-2021-32655 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-35540 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows low pr… archdebian
CVE-2021-21226 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-2086 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2112 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-37997 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-2073 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2111 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2119 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-23958 high — 8.0 — The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox < 85. archdebian
CVE-2021-37961 high — 8.0 — Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-32656 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-30541 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-2284 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-2296 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high… archdebian
CVE-2021-25742 high — 8.0 — information disclosure in kubectl-ingress-nginx arch
CVE-2021-23996 high — 8.0 — By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other att… archdebian
CVE-2021-2454 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Difficult to exploit vulnerability allows low … archdebian
CVE-2021-2475 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-35538 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows low pr… archdebian
CVE-2021-35542 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-29952 high — 8.0 — When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. This vulnera… archdebian
CVE-2021-22218 high — 8.0 — multiple issues in gitlab arch
CVE-2021-37974 high — 8.0 — Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-30537 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-22214 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30540 high — 8.0 — Incorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform domain spoofing via a crafted HTML page. archdebian
CVE-2021-32919 high — 8.0 — An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not co… archdebian
CVE-2021-30518 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39893 high — 8.0 — multiple issues in gitlab arch
CVE-2021-32778 high — 8.0 — multiple issues in istio arch
CVE-2021-32921 high — 8.0 — An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for comparing certain secret strings when running under Lua 5.2 or later. This can potentially be used in a… archdebian
CVE-2021-30538 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-22219 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30510 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30612 high — 8.0 — Chromium: CVE-2021-30612 Use after free in WebRTC archdebian
CVE-2021-43891 high — 8.0 — multiple issues in code arch
CVE-2021-39910 high — 8.0 — multiple issues in gitlab arch
CVE-2021-43908 high — 8.0 — multiple issues in code arch
CVE-2021-0535 high — 8.0 — multiple issues in wpa_supplicant arch
CVE-2021-30519 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39938 high — 8.0 — multiple issues in gitlab arch
CVE-2021-38498 high — 8.0 — During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Fire… archsusedebianrockylinux
CVE-2021-30578 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29985 high — 8.0 — A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR… archsusedebianrockylinux
CVE-2021-22227 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22228 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39941 high — 8.0 — multiple issues in gitlab arch
CVE-2021-29956 high — 8.0 — OpenPGP secret keys that were imported using Thunderbird version 78.8.1 up to version 78.10.1 were stored unencrypted on the user's local disk. The master password protection was inactive for those k… archsuserockylinuxdebian
CVE-2021-30522 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21165 high — 8.0 — Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-4066 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30597 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-22945 high — 8.0 — When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call t… archdebiansuse
CVE-2021-30591 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-4053 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30581 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39945 high — 8.0 — multiple issues in gitlab arch
CVE-2021-4062 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-23999 high — 8.0 — If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vul… archsusedebian
CVE-2021-38007 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-32751 high — 8.0 — Gradle is a build tool with a focus on build automation. In versions prior to 7.2, start scripts generated by the `application` plugin and the `gradlew` script are both vulnerable to arbitrary code e… archsusedebian
CVE-2021-39901 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21156 high — 8.0 — Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script. archdebian
CVE-2021-38497 high — 8.0 — Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks. This vulnerabil… archsusedebianrockylinux
CVE-2021-39905 high — 8.0 — multiple issues in gitlab arch
CVE-2021-38018 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-2123 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-38012 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38015 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38001 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37992 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37996 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37990 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37981 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21198 high — 8.0 — Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. archdebian
CVE-2021-30594 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-2120 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-32680 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-30596 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-22215 high — 8.0 — information disclosure in gitlab arch
CVE-2021-39889 high — 8.0 — multiple issues in gitlab arch
CVE-2021-37963 high — 8.0 — Side-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to bypass site isolation via a crafted HTML page. archdebian
CVE-2021-21174 high — 8.0 — Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. archdebian
CVE-2021-30608 high — 8.0 — Chromium: CVE-2021-30608 Use after free in Web Share archdebian
CVE-2021-29965 high — 8.0 — A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that… archdebian
CVE-2021-39906 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21150 high — 8.0 — Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted… archdebian