2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-0332 | HIGH | 7.8 | 0.2% | Feb 10, 2021 | In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to... |
| CVE-2021-0331 | HIGH | 7.3 | 0.3% | Feb 10, 2021 | In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure defaul... |
| CVE-2021-0330 | HIGH | 7.8 | 0.3% | Feb 10, 2021 | In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This coul... |
| CVE-2021-0329 | HIGH | 7.8 | 0.3% | Feb 10, 2021 | In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bo... |
| CVE-2021-0328 | HIGH | 7.8 | 0.2% | Feb 10, 2021 | In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan resul... |
| CVE-2021-0327 | HIGH | 7.8 | 0.3% | Feb 10, 2021 | In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored bind... |
| CVE-2021-0326 | HIGH | 7.5 | 4.7% | Feb 10, 2021 | In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead... |
| CVE-2021-0325 | HIGH | 8.8 | 2.0% | Feb 10, 2021 | In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. ... |
| CVE-2021-0314 | HIGH | 7.3 | 0.3% | Feb 10, 2021 | In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a t... |
| CVE-2021-0305 | HIGH | 7.8 | 0.5% | Feb 10, 2021 | In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local es... |
| CVE-2021-0302 | HIGH | 7.8 | 0.7% | Feb 10, 2021 | In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local es... |
| CVE-2021-23876 | HIGH | 7.8 | 0.4% | Feb 10, 2021 | Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated priv... |
| CVE-2021-23874 | HIGH | 7.8 | 1.0% | Feb 10, 2021 | Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain ... |
| CVE-2021-26958 | HIGH | 8.8 | 1.6% | Feb 9, 2021 | An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation... |
| CVE-2021-26953 | HIGH | 7.5 | 1.5% | Feb 9, 2021 | An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive inf... |
| CVE-2021-26952 | HIGH | 7.5 | 1.6% | Feb 9, 2021 | An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive informatio... |
| CVE-2021-21475 | HIGH | 7.5 | 1.9% | Feb 9, 2021 | Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to exp... |
| CVE-2021-21472 | HIGH | 8.8 | 1.2% | Feb 9, 2021 | SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set p... |
| CVE-2021-26551 | HIGH | 8.8 | 2.6% | Feb 9, 2021 | An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashel... |
| CVE-2021-3191 | HIGH | 8.8 | 3.6% | Feb 9, 2021 | Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY ... |
| CVE-2021-22663 | HIGH | 7.8 | 1.3% | Feb 9, 2021 | Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This... |
| CVE-2021-26675 | HIGH | 8.8 | 1.3% | Feb 9, 2021 | A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute ... |
| CVE-2021-21148 | HIGH | 8.8 | 19.8% | Feb 9, 2021 | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap... |
| CVE-2021-3394 | HIGH | 8.8 | 5.8% | Feb 9, 2021 | Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per... |
| CVE-2021-21145 | HIGH | 8.8 | 1.0% | Feb 9, 2021 | Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap co... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now