Browse CVEs

HIGH 7.8 CVE-2021-1750 Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 202… Ipados 7.3 / 10.14.6+ Fix from $1,9502021-04-02 HIGH 7.8 CVE-2020-29620 This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 20… Mac Os X 10.14.6 / 10.15.7+ Fix from $1,9502021-04-02 HIGH 7.8 CVE-2020-27938 A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Up… Mac Os X 11.1.0 / 11.2.0+ Fix from $1,9502021-04-02 HIGH 7.6 CVE-2020-7467 In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a numb… FreeBSD Mitigation only Fix from $1,9502021-03-26 HIGH 7.8 CVE-2021-28250 CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an … Ehealth Performance Manager after 6.3.2.12 Fix from $1,9502021-03-26 HIGH 7.8 CVE-2021-27448 A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior … Mu320e Firmware 04a00.1+ Fix from $1,9502021-03-25 HIGH 7.8 CVE-2021-27454 The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequ… Reason Dr60 Firmware 02a04.1+ Fix from $1,9502021-03-25 HIGH 7.8 CVE-2021-27192 Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator p… Vision Pro after 9.7.1 Fix from $1,9502021-03-25 MEDIUM 6.6 CVE-2021-1371 A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileg… Ios Xe Sd Wan Mitigation only Fix from $1,6002021-03-24 HIGH 7.8 CVE-2019-19354 An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attac… Openshift Container Platform 4.4.3+ Fix from $1,9502021-03-24 HIGH 7.8 CVE-2017-20002 The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local user… Shadow No fix yet Fix from $1,9502021-03-17 HIGH 7.3 CVE-2020-4184 IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or… Security Guardium No fix yet Fix from $1,9502021-03-15 HIGH 7.8 CVE-2021-27077 Windows Win32k Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-03-11 HIGH 7.0 CVE-2021-26863EPSS 12% Windows Win32k Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-03-11 HIGH 7.8 CVE-2021-1640 Windows Print Spooler Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-03-11 HIGH 7.1 CVE-2021-1729 Windows Update Stack Setup Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-03-11 HIGH 7.8 CVE-2021-24090 Windows Error Reporting Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-03-11 HIGH 7.0 CVE-2021-24095 DirectX Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-03-11 HIGH 7.1 CVE-2021-25337 KEV Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write… Android Mitigation only Fix from $1,9502021-03-04 MEDIUM 6.5 CVE-2020-12527 An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Impro… Mbconnect24 after 2.11.2 Fix from $1,6002021-03-02 HIGH 7.7 CVE-2020-12528 An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation a… Mbconnect24 after 2.6.2 Fix from $1,9502021-03-02 HIGH 7.8 CVE-2021-24102 Windows Event Tracing Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-02-25 HIGH 7.0 CVE-2021-24087 Azure IoT CLI extension Elevation of Privilege Vulnerability after 0.10.6 Fix from $1,9502021-02-25 HIGH 7.8 CVE-2021-24092 Microsoft Defender Elevation of Privilege Vulnerability Windows Defender Patch available Fix from $1,9502021-02-25 HIGH 7.8 CVE-2021-24096 Windows Kernel Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-02-25 HIGH 7.8 CVE-2021-1698 Windows Win32k Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-02-25 HIGH 7.8 CVE-2021-1727 Windows Installer Elevation of Privilege Vulnerability Windows 10 Patch available Fix from $1,9502021-02-25 HIGH 8.8 CVE-2021-1728 System Center Operations Manager Elevation of Privilege Vulnerability System Center Operations Manager Patch available Fix from $1,9502021-02-25 HIGH 7.8 CVE-2021-1733 Sysinternals PsExec Elevation of Privilege Vulnerability Psexec Patch available Fix from $1,9502021-02-25 CRITICAL 10.0 CVE-2021-1388EPSS 14% A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthentic… Aci Multi Site Orchestrator 3.0+ Fix from $2,3002021-02-24