2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0395 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could l... |
| CVE-2021-0393 | HIGH | 7.8 | 1.0% | Mar 10, 2021 | In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow... |
| CVE-2021-0392 | HIGH | 7.8 | 0.2% | Mar 10, 2021 | In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of ... |
| CVE-2021-0391 | HIGH | 7.8 | 0.7% | Mar 10, 2021 | In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, withou... |
| CVE-2021-0390 | HIGH | 7.8 | 0.2% | Mar 10, 2021 | In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to ... |
| CVE-2021-0376 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due ... |
| CVE-2021-0372 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingInt... |
| CVE-2021-0369 | HIGH | 7.8 | 0.1% | Mar 10, 2021 | In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state n... |
| CVE-2021-20671 | HIGH | 7.2 | 1.8% | Mar 10, 2021 | Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative priv... |
| CVE-2021-20670 | HIGH | 7.5 | 1.5% | Mar 10, 2021 | Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to r... |
| CVE-2021-3310 | HIGH | 7.8 | 1.0% | Mar 10, 2021 | Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can ... |
| CVE-2021-21300 | HIGH | 7.5 | 88.6% | Mar 9, 2021 | Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository th... |
| CVE-2021-23353 | HIGH | 7.5 | 2.6% | Mar 9, 2021 | This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function. |
| CVE-2021-21190 | HIGH | 8.8 | 1.5% | Mar 9, 2021 | Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sens... |
| CVE-2021-21188 | HIGH | 8.8 | 1.6% | Mar 9, 2021 | Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2021-21180 | HIGH | 8.8 | 1.6% | Mar 9, 2021 | Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit hea... |
| CVE-2021-21179 | HIGH | 8.8 | 1.4% | Mar 9, 2021 | Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potenti... |
| CVE-2021-21174 | HIGH | 8.8 | 1.5% | Mar 9, 2021 | Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navi... |
| CVE-2021-21172 | HIGH | 8.1 | 1.7% | Mar 9, 2021 | Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote at... |
| CVE-2021-21169 | HIGH | 8.8 | 1.4% | Mar 9, 2021 | Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perfor... |
| CVE-2021-21167 | HIGH | 8.8 | 1.4% | Mar 9, 2021 | Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-21166 | HIGH | 8.8 | 26.5% | Mar 9, 2021 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupti... |
| CVE-2021-21165 | HIGH | 8.8 | 1.1% | Mar 9, 2021 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupti... |
| CVE-2021-21162 | HIGH | 8.8 | 1.4% | Mar 9, 2021 | Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap co... |
| CVE-2021-21161 | HIGH | 8.8 | 1.5% | Mar 9, 2021 | Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now