VIR Vulnerability Intelligence Relay

CVEs from 2021

5,048 normalized CVEs published or assigned in this year.

Total
5,048
critical
critical 273
high
high 975
medium
medium 1,141
low
low 135
% Critical
5.4%
% with KEV
4.2%
% with exploit
4.2%

Top vendors

Top products

  • office 13
  • 365_apps 6
  • office_long_term_servicing_channel 6
  • library_automation_system 5
  • single_connect 4
  • http_server 3
  • solidfire 2
  • student_information_management_system 2

Top packages

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2021-38499 high — 8.0 — Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl… archdebian
CVE-2021-4064 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30584 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30579 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-23995 high — 8.0 — When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulner… archsusedebian
CVE-2021-30582 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30573 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30571 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30572 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30567 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30559 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30555 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30569 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30564 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-29969 high — 8.0 — If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS handshake, then Thunderbird didn't ignore … archsuserockylinuxdebian
CVE-2021-20305 high — 8.0 — A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply fun… archsuserockylinuxdebian
CVE-2021-30568 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30566 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30565 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30541 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30561 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30556 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30562 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-21194 high — 8.0 — Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. archdebian
CVE-2021-30557 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30537 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30523 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30520 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30518 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30543 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30539 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30516 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30538 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30536 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30526 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30530 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30517 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30510 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30513 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30527 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30519 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30506 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30515 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30509 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-25216 high — 8.0 — In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of t… debianarchsuse
CVE-2021-30507 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30514 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30512 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30511 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21226 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21225 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21223 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21111 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21222 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21192 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-21116 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21191 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-21170 high — 8.0 — Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted … archdebian
CVE-2021-23968 high — 8.0 — If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be u… archsusedebian
CVE-2021-23953 high — 8.0 — If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects … archsusedebian
CVE-2021-29477 high — 8.0 — Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using t… suserockylinuxdebian
CVE-2021-21115 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21114 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21106 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21113 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-28375 high — 8.0 — An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85… archsusedebian
CVE-2021-28660 high — 8.0 — rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org rele… archsusedebian
CVE-2021-21112 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38020 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38018 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38014 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38012 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38011 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-21261 high — 8.0 — Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` service that can allow sandboxed applications to exec… archsusedebian
CVE-2021-38016 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38009 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38015 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38007 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38006 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38004 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38001 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-38005 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37995 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37993 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37992 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37994 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37998 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37996 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37990 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37991 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37989 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37988 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37981 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37987 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37984 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37986 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37985 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-37982 high — 8.0 — multiple issues in chromium archdebian
CVE-2021-30630 high — 8.0 — arbitrary code execution in chromium archdebian
CVE-2021-30594 high — 8.0 — multiple issues in chromium archdebian