2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40463 | HIGH | 7.7 | 2.4% | Oct 13, 2021 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
| CVE-2021-40462 | HIGH | 7.8 | 2.4% | Oct 13, 2021 | Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability |
| CVE-2021-40461 | HIGH | 8 | 1.3% | Oct 13, 2021 | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2021-40457 | HIGH | 7.4 | 1.5% | Oct 13, 2021 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability |
| CVE-2021-40450 | HIGH | 7.8 | 2.0% | Oct 13, 2021 | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-40449 | HIGH | 7.8 | 73.4% | Oct 13, 2021 | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-40443 | HIGH | 7.8 | 0.6% | Oct 13, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2021-38672 | HIGH | 8 | 1.1% | Oct 13, 2021 | Windows Hyper-V Remote Code Execution Vulnerability |
| CVE-2021-36970 | HIGH | 8.8 | 2.9% | Oct 13, 2021 | Windows Print Spooler Spoofing Vulnerability |
| CVE-2021-36953 | HIGH | 7.5 | 4.8% | Oct 13, 2021 | Windows TCP/IP Denial of Service Vulnerability |
| CVE-2021-34453 | HIGH | 7.5 | 2.7% | Oct 13, 2021 | Microsoft Exchange Server Denial of Service Vulnerability |
| CVE-2021-26442 | HIGH | 7 | 0.8% | Oct 13, 2021 | Windows HTTP.sys Elevation of Privilege Vulnerability |
| CVE-2021-26441 | HIGH | 7.8 | 0.9% | Oct 13, 2021 | Storage Spaces Controller Elevation of Privilege Vulnerability |
| CVE-2021-3330 | HIGH | 8.8 | 0.6% | Oct 12, 2021 | RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Z... |
| CVE-2021-3321 | HIGH | 8.8 | 0.7% | Oct 12, 2021 | Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Intege... |
| CVE-2021-39184 | HIGH | 8.6 | 1.0% | Oct 12, 2021 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability ... |
| CVE-2021-38862 | HIGH | 7.5 | 0.7% | Oct 12, 2021 | IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to de... |
| CVE-2021-29645 | HIGH | 7.8 | 0.2% | Oct 12, 2021 | Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a ... |
| CVE-2021-35496 | HIGH | 7.5 | 0.6% | Oct 12, 2021 | The XMLA Connections component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBCO Ja... |
| CVE-2021-35495 | HIGH | 8.8 | 0.8% | Oct 12, 2021 | The Scheduler Connection component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server, TIBC... |
| CVE-2021-37732 | HIGH | 7.2 | 3.0% | Oct 12, 2021 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6... |
| CVE-2021-40500 | HIGH | 7.5 | 1.3% | Oct 12, 2021 | SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated atta... |
| CVE-2021-38181 | HIGH | 7.5 | 1.1% | Oct 12, 2021 | SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allo... |
| CVE-2021-38178 | HIGH | 8.8 | 1.3% | Oct 12, 2021 | The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 7... |
| CVE-2021-37730 | HIGH | 7.2 | 3.0% | Oct 12, 2021 | A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now