VIR Vulnerability Intelligence Relay

CVEs from 2021

6,087 normalized CVEs published or assigned in this year.

Total
6,087
critical
critical 273
high
high 975
medium
medium 1,141
low
low 135
% Critical
4.5%
% with KEV
3.5%
% with exploit
3.5%

Top vendors

Top products

  • office 13
  • 365_apps 6
  • office_long_term_servicing_channel 6
  • library_automation_system 5
  • single_connect 4
  • http_server 3
  • solidfire 2
  • student_information_management_system 2

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2021-30624 high — 8.0 — Chromium: CVE-2021-30624 Use after free in Autofill archdebian
CVE-2021-39881 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39868 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39877 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39870 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21107 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39889 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30628 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30629 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-37957 high — 8.0 — Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-37956 high — 8.0 — Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted… archdebian
CVE-2021-37958 high — 8.0 — Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page. archdebian
CVE-2021-37959 high — 8.0 — Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a craft… archdebian
CVE-2021-37961 high — 8.0 — Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21213 high — 8.0 — Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21217 high — 8.0 — Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file. archdebian
CVE-2021-1055 high — 8.0 — multiple issues in nvidia-utils arch
CVE-2021-39884 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21227 high — 8.0 — Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21229 high — 8.0 — Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page. archdebian
CVE-2021-21228 high — 8.0 — Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a … archdebian
CVE-2021-32765 high — 8.0 — Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted `RESP` `mult-bulk` proto… archdebian
CVE-2021-21230 high — 8.0 — Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21216 high — 8.0 — Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page. archdebian
CVE-2021-21233 high — 8.0 — Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21232 high — 8.0 — Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-30521 high — 8.0 — Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. archdebian
CVE-2021-30508 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37968 high — 8.0 — Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page. archdebian
CVE-2021-21212 high — 8.0 — Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP. archdebian
CVE-2021-37980 high — 8.0 — Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows. archdebian
CVE-2021-39912 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39913 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39934 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39936 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39933 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39932 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39931 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39917 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21168 high — 8.0 — Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. archdebian
CVE-2021-42322 high — 8.0 — multiple issues in code arch
CVE-2021-39941 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39915 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39945 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39906 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39897 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39909 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39898 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39905 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39895 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39907 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39903 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39902 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39914 high — 8.0 — multiple issues in gitlab arch
CVE-2021-41524 high — 8.0 — multiple issues in apache debianarch
CVE-2021-39875 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39873 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39872 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39891 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39887 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39886 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39879 high — 8.0 — multiple issues in gitlab arch
CVE-2021-37960 high — 8.0 — multiple issues in chromium arch
CVE-2021-39890 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39878 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39874 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39866 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39883 high — 8.0 — multiple issues in gitlab arch
CVE-2021-26434 high — 8.0 — multiple issues in code arch
CVE-2021-41387 high — 8.0 — seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root. archdebian
CVE-2021-39175 high — 8.0 — cross-site scripting in hedgedoc arch
CVE-2021-32777 high — 8.0 — multiple issues in istio arch
CVE-2021-30631 high — 8.0 — arbitrary code execution in chromium arch
CVE-2021-22216 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22213 high — 8.0 — multiple issues in gitlab arch
CVE-2021-32654 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-22220 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22221 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22218 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22214 high — 8.0 — multiple issues in gitlab arch
CVE-2021-32778 high — 8.0 — multiple issues in istio arch
CVE-2021-22219 high — 8.0 — multiple issues in gitlab arch
CVE-2021-38494 high — 8.0 — Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl… archdebian
CVE-2021-22236 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22181 high — 8.0 — multiple issues in gitlab arch
CVE-2021-32653 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-22915 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-22237 high — 8.0 — multiple issues in gitlab arch
CVE-2021-28457 high — 8.0 — arbitrary code execution in code arch
CVE-2021-28471 high — 8.0 — arbitrary code execution in code arch
CVE-2021-28477 high — 8.0 — arbitrary code execution in code arch
CVE-2021-3557 high — 8.0 — information disclosure in argocd arch
CVE-2021-32688 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-28473 high — 8.0 — arbitrary code execution in code arch
CVE-2021-28469 high — 8.0 — arbitrary code execution in code arch
CVE-2021-22230 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22223 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22225 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22229 high — 8.0 — multiple issues in gitlab arch
CVE-2021-38500 high — 8.0 — Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these… archdebianrockylinux