2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-26859 | HIGH | 7.7 | 2.8% | Mar 11, 2021 | Microsoft Power BI Information Disclosure Vulnerability |
| CVE-2021-26411 | HIGH | 8.8 | 80.8% | Mar 11, 2021 | Internet Explorer Memory Corruption Vulnerability |
| CVE-2021-24110 | HIGH | 7.8 | 2.3% | Mar 11, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2021-24108 | HIGH | 7.8 | 2.3% | Mar 11, 2021 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2021-24095 | HIGH | 7 | 0.6% | Mar 11, 2021 | DirectX Elevation of Privilege Vulnerability |
| CVE-2021-24090 | HIGH | 7.8 | 3.3% | Mar 11, 2021 | Windows Error Reporting Elevation of Privilege Vulnerability |
| CVE-2021-24089 | HIGH | 7.8 | 3.9% | Mar 11, 2021 | HEVC Video Extensions Remote Code Execution Vulnerability |
| CVE-2021-1729 | HIGH | 7.1 | 0.9% | Mar 11, 2021 | Windows Update Stack Setup Elevation of Privilege Vulnerability |
| CVE-2021-1640 | HIGH | 7.8 | 0.8% | Mar 11, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2021-21378 | HIGH | 8.2 | 1.7% | Mar 11, 2021 | Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authe... |
| CVE-2021-21363 | HIGH | 7 | 0.4% | Mar 11, 2021 | swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients... |
| CVE-2021-27918 | HIGH | 7.5 | 2.5% | Mar 11, 2021 | encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewToken... |
| CVE-2021-21371 | HIGH | 8.6 | 0.5% | Mar 10, 2021 | Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Task... |
| CVE-2021-21265 | HIGH | 7.5 | 1.5% | Mar 10, 2021 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1... |
| CVE-2021-21772 | HIGH | 8.1 | 4.3% | Mar 10, 2021 | A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf... |
| CVE-2021-0465 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lea... |
| CVE-2021-0464 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This ... |
| CVE-2021-0389 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local esc... |
| CVE-2021-0388 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast... |
| CVE-2021-0386 | HIGH | 7.8 | 0.3% | Mar 10, 2021 | In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could le... |
| CVE-2021-0385 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connecti... |
| CVE-2021-0383 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege... |
| CVE-2021-0380 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony setting... |
| CVE-2021-0399 | HIGH | 7.8 | 0.4% | Mar 10, 2021 | In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to loca... |
| CVE-2021-0398 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. Thi... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now