Browse CVEs

CRITICAL 9.8 CVE-2021-45637 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 befor… R6260 Firmware 1.1.0.76 / 1.2.0.62+ Fix from $2,3002021-12-26 CRITICAL 9.8 CVE-2021-45638 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 befor… D6220 Firmware 1.0.0.56 / 1.0.0.68+ Fix from $2,3002021-12-26 HIGH 8.8 CVE-2021-45607 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 before 1.0.4.118, R6700v3 before… R6400v2 Firmware 1.0.4.118 / 1.0.5.126+ Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-45605 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.68, R7000 before 1.0.… R6400 Firmware 1.0.1.68 / 1.0.3.50+ Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-45606 Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 before 1.0.1.70, R7000 before 1.0.… R6400 Firmware 1.0.1.70 / 1.0.4.46+ Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-45573 Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6260 before 1.1.0.76, R6800 befor… R6260 Firmware 1.1.0.76 / 1.2.0.62+ Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-35055 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected C… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37560 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected C… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37561 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected C… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37563 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected C… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37566 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT76… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37568 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT76… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37569 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT76… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37571 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT76… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37583 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT76… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 8.8 CVE-2021-37584 MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected C… Mt7603e Firmware Mitigation only Fix from $1,9502021-12-26 HIGH 7.8 CVE-2021-40161 A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version. Revit 2019.1.4 / 2019.6+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-4062 Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentia… Chrome 96.0.4664.93+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-4079 Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted Web… Chrome 96.0.4664.93+ Fix from $1,9502021-12-23 CRITICAL 9.6 CVE-2021-38013 Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a We… Chrome 96.0.4664.45+ Fix from $2,3002021-12-23 HIGH 8.8 CVE-2021-38014 Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a craf… Chrome 96.0.4664.45+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-4055 Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension t… Chrome 96.0.4664.93+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-4058 Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 96.0.4664.93+ Fix from $1,9502021-12-23 CRITICAL 9.8 CVE-2021-39306 A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a big size Auth… Rtl8195am Firmware 2.0.10+ Fix from $2,3002021-12-22 CRITICAL 9.8 CVE-2021-40393 An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) a… Debian Linux No fix yet Fix from $2,3002021-12-22 CRITICAL 9.8 CVE-2021-40394 An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) a… Debian Linux No fix yet Fix from $2,3002021-12-22 CRITICAL 9.1 CVE-2021-21887 A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).… Premierwave 2050 Firmware No fix yet Fix from $2,3002021-12-22 CRITICAL 9.9 CVE-2021-21889 A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A special… Premierwave 2050 Firmware No fix yet Fix from $2,3002021-12-22 CRITICAL 9.1 CVE-2021-21890 A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). … Premierwave 2050 Firmware No fix yet Fix from $2,3002021-12-22 CRITICAL 9.1 CVE-2021-21891 A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). … Premierwave 2050 Firmware No fix yet Fix from $2,3002021-12-22