VIR Vulnerability Intelligence Relay

CVEs from 2021

5,048 normalized CVEs published or assigned in this year.

Total
5,048
critical
critical 273
high
high 975
medium
medium 1,141
low
low 135
% Critical
5.4%
% with KEV
4.2%
% with exploit
4.2%

Top vendors

Top products

  • office 13
  • 365_apps 6
  • office_long_term_servicing_channel 6
  • library_automation_system 5
  • single_connect 4
  • http_server 3
  • solidfire 2
  • student_information_management_system 2

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2021-2285 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-39938 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30592 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-0535 high — 8.0 — multiple issues in wpa_supplicant arch
CVE-2021-43908 high — 8.0 — multiple issues in code arch
CVE-2021-38004 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39910 high — 8.0 — multiple issues in gitlab arch
CVE-2021-43891 high — 8.0 — multiple issues in code arch
CVE-2021-30591 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30590 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30625 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-38006 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30621 high — 8.0 — Chromium: CVE-2021-30621 UI Spoofing in Autofill archdebian
CVE-2021-37978 high — 8.0 — Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21163 high — 8.0 — Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. archdebian
CVE-2021-30588 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30585 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30576 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30584 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30579 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30582 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30573 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30571 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30572 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30567 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30559 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30555 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30569 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30564 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30568 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29952 high — 8.0 — When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. This vulnera… archdebian
CVE-2021-35542 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2409 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2306 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2296 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high… archdebian
CVE-2021-2297 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high… archdebian
CVE-2021-2287 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-2309 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high… archdebian
CVE-2021-2286 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-2284 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-30566 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-2281 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-2280 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-2145 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high… archdebian
CVE-2021-2130 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-30565 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-23962 high — 8.0 — Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85. archdebian
CVE-2021-2127 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2128 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows low pr… archdebian
CVE-2021-2124 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2073 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2112 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2086 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2074 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-30541 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30561 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30556 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30562 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30557 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30537 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30523 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30520 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21198 high — 8.0 — Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. archdebian
CVE-2021-38007 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30518 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30543 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30539 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30516 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30538 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30536 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21188 high — 8.0 — Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-21210 high — 8.0 — Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page. archdebian
CVE-2021-21195 high — 8.0 — Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-30526 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30530 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30517 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30510 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30513 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30535 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21161 high — 8.0 — Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-30527 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30519 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21157 high — 8.0 — Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-30506 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21154 high — 8.0 — Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML… archdebian
CVE-2021-30515 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30509 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30507 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30514 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30512 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-28373 high — 8.0 — The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch f… archdebian
CVE-2021-30511 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30608 high — 8.0 — Chromium: CVE-2021-30608 Use after free in Web Share archdebian
CVE-2021-30609 high — 8.0 — Chromium: CVE-2021-30609 Use after free in Sign-In archdebian
CVE-2021-38371 high — 8.0 — The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending. archdebian
CVE-2021-30618 high — 8.0 — Chromium: CVE-2021-30618 Inappropriate implementation in DevTools archdebian
CVE-2021-23964 high — 8.0 — Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these… archsusedebian
CVE-2021-21153 high — 8.0 — Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. archdebian
CVE-2021-21212 high — 8.0 — Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP. archdebian
CVE-2021-23972 high — 8.0 — One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Firefox will display a warning dialog; howe… archsusedebian