VIR Vulnerability Intelligence Relay

CVEs from 2021

5,048 normalized CVEs published or assigned in this year.

Total
5,048
critical
critical 273
high
high 975
medium
medium 1,141
low
low 135
% Critical
5.4%
% with KEV
4.2%
% with exploit
4.2%

Top vendors

Top products

  • office 13
  • 365_apps 6
  • office_long_term_servicing_channel 6
  • library_automation_system 5
  • single_connect 4
  • http_server 3
  • solidfire 2
  • student_information_management_system 2

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2021-39883 high — 8.0 — multiple issues in gitlab arch
CVE-2021-43540 high — 8.0 — WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects … archsusedebian
CVE-2021-29477 high — 8.0 — Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using t… suserockylinuxdebian
CVE-2021-21170 high — 8.0 — Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted … archdebian
CVE-2021-22223 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22230 high — 8.0 — multiple issues in gitlab arch
CVE-2021-22226 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21175 high — 8.0 — Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. archdebian
CVE-2021-2284 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-2306 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2130 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-22231 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21219 high — 8.0 — Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file. archdebian
CVE-2021-23996 high — 8.0 — By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other att… archdebian
CVE-2021-30524 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21163 high — 8.0 — Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. archdebian
CVE-2021-39869 high — 8.0 — multiple issues in gitlab arch
CVE-2021-38575 high — 8.0 — Important: edk2 security update archdebiansuserockylinux
CVE-2021-30557 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-37997 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30522 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29428 high — 8.0 — In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds c… archsusedebian
CVE-2021-30534 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39894 high — 8.0 — multiple issues in gitlab arch
CVE-2021-39892 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21167 high — 8.0 — Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-2126 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-22241 high — 8.0 — multiple issues in gitlab arch
CVE-2021-2125 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-30561 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-2119 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-2129 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-3405 high — 8.0 — A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml. archdebian
CVE-2021-30541 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-39886 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30565 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-2111 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-44879 high — 8.0 — In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. archsusedebian
CVE-2021-2120 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-30556 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30562 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-22229 high — 8.0 — multiple issues in gitlab arch
CVE-2021-2124 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-30566 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30568 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-28375 high — 8.0 — An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85… archsusedebian
CVE-2021-3446 high — 8.0 — A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV (initialization vector) when certain s… archsusedebian
CVE-2021-30537 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30523 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-20305 high — 8.0 — A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply fun… archsuserockylinuxdebian
CVE-2021-2321 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-30520 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30518 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37965 high — 8.0 — Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page. archdebian
CVE-2021-2073 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-30543 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30539 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39879 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30564 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30516 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30538 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30569 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-2281 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauth… archdebian
CVE-2021-2409 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.24. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-41611 high — 8.0 — An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem all… archdebian
CVE-2021-30555 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-43529 high — 8.0 — Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerabl… suserockylinuxdebian
CVE-2021-30526 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30530 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39873 high — 8.0 — multiple issues in gitlab arch
CVE-2021-38501 high — 8.0 — Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these… archsusedebianrockylinux
CVE-2021-2074 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-42327 high — 8.0 — dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to th… archsusedebian
CVE-2021-30559 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-39891 high — 8.0 — multiple issues in gitlab arch
CVE-2021-30567 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21169 high — 8.0 — Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. archdebian
CVE-2021-2086 high — 8.0 — Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high p… archdebian
CVE-2021-4093 high — 8.0 — A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host ker… rockylinuxdebian
CVE-2021-30519 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30506 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-29967 high — 8.0 — Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of thes… archdebianrockylinux
CVE-2021-30515 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-23986 high — 8.0 — A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this cross-origin request could have been read… archsusedebian
CVE-2021-30509 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30572 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30507 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38385 high — 8.0 — Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-00… archdebian
CVE-2021-30514 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-27064 high — 8.0 — privilege escalation in code arch
CVE-2021-32678 high — 8.0 — multiple issues in nextcloud arch
CVE-2021-30512 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30511 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30571 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21226 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-22945 high — 8.0 — When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call t… archdebiansuse
CVE-2021-21225 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39866 high — 8.0 — multiple issues in gitlab arch
CVE-2021-21223 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-39917 high — 8.0 — multiple issues in gitlab arch