2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-0485HIGH7.8In getMinimalSize of PipBoundsAlgorithm.java, there is a possible bypass of restrictions on background processes due to ...
CVE-2021-0482HIGH7In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead ...
CVE-2021-0481HIGH7.8In onActivityResult of EditUserPhotoController.java, there is a possible access of unauthorized files due to an unexpect...
CVE-2021-0477HIGH7.8In notifyScreenshotError of ScreenshotNotificationsController.java, there is a possible permission bypass due to an unsa...
CVE-2021-0476HIGH7In FindOrCreatePeer of btif_av.cc, there is a possible use after free due to a race condition. This could lead to local ...
CVE-2021-0475HIGH8.8In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lead...
CVE-2021-0473HIGH8.8In rw_t3t_process_error of rw_t3t.cc, there is a possible double free due to uninitialized data. This could lead to remo...
CVE-2021-0472HIGH7.8In shouldLockKeyguard of LockTaskController.java, there is a possible way to exit App Pinning without a PIN due to a per...
CVE-2021-0466HIGH7.5In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This coul...
CVE-2021-28213HIGH7.5Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.
CVE-2021-28210HIGH7.8An unlimited recursion in DxeCore in EDK II.
CVE-2021-23205HIGH8.1Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configura...
CVE-2021-23140HIGH8.8Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an ...
CVE-2021-22904HIGH7.5The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability ...
CVE-2021-22902HIGH7.5The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffe...
CVE-2021-22901HIGH8.1curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when...
CVE-2021-22766HIGH7.5A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic ...
CVE-2021-22762HIGH7.8A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V...
CVE-2021-22761HIGH7.8A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definitio...
CVE-2021-22760HIGH7.8A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and pr...
CVE-2021-22759HIGH7.8A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in ...
CVE-2021-22758HIGH7.8A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that...
CVE-2021-22757HIGH7.8A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result...
CVE-2021-22756HIGH7.8A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result...
CVE-2021-22755HIGH7.8A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now