Browse CVEs

HIGH 8.8 CVE-2021-38493 Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption a… Firefox 78.14 / 92.0+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-38494 Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 92.0+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-38495 Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume… Firefox Esr 91.1+ Fix from $1,9502021-11-03 HIGH 8.8 CVE-2021-38499 Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that wit… Firefox 93.0+ Fix from $1,9502021-11-03 CRITICAL 9.8 CVE-2021-41036 In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size in readpacket. Paho Mqtt C\/c\+\+ Client 1.1.0+ Fix from $2,3002021-11-03 CRITICAL 9.6 CVE-2021-37981 Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially… Chrome 95.0.4638.54+ Fix from $2,3002021-11-02 HIGH 8.8 CVE-2021-37984 Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37986 Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit hea… Chrome 95.0.4638.54+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37978 Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 94.0.4606.81+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-37979 heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website… Chrome 94.0.4606.81+ Fix from $1,9502021-11-02 CRITICAL 9.8 CVE-2021-36186 A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unauthorized c… Fortiweb after 6.3.15 Fix from $2,3002021-11-02 MEDIUM 5.5 CVE-2021-22564 For certain valid JPEG XL images with a size slightly larger than an integer number of groups (256x256 pixels) when processing the groups out of orde… Libjxl after 0.6.0 Fix from $1,6002021-11-01 CRITICAL 9.8 CVE-2021-3756 libmysofa is vulnerable to Heap-based Buffer Overflow Fedora 1.2.1+ Fix from $2,3002021-10-29 CRITICAL 9.8 CVE-2020-22079 Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code … Ac10u Firmware No fix yet Fix from $2,3002021-10-29 HIGH 7.8 CVE-2021-30824 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catali… Mac Os X 10.15.7 / 11.6.1+ Fix from $1,9502021-10-28 HIGH 7.8 CVE-2020-9897 An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1. Processin… Ipados 11.0.1 / 14.2+ Fix from $1,9502021-10-28 HIGH 7.8 CVE-2021-30814 A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a… Ipados 8.0 / 12.0.1+ Fix from $1,9502021-10-28 MEDIUM 5.5 CVE-2021-22465 A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System un… Harmonyos No fix yet Fix from $1,6002021-10-28 HIGH 8.8 CVE-2021-37748EPSS 7% Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated … Ht801 Firmware 1.0.29+ Fix from $1,9502021-10-28 HIGH 7.8 CVE-2021-3903 vim is vulnerable to Heap-based Buffer Overflow Fedora 8.2.3564+ Fix from $1,9502021-10-27 HIGH 7.5 CVE-2021-40118 A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software c… Adaptive Security Appliance 6.4.0.13 / 6.6.5+ Fix from $1,9502021-10-27 HIGH 7.5 CVE-2021-37129 There is an out of bounds write vulnerability in some Huawei products. The vulnerability is caused by a function of a module that does not properly v… Ips Module Firmware Mitigation only Fix from $1,9502021-10-27 HIGH 7.5 CVE-2021-34583EPSS 8% Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the C… 750 8214 Firmware No fix yet Fix from $1,9502021-10-26 HIGH 8.8 CVE-2021-34856 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must firs… Parallels Desktop Patch available Fix from $1,9502021-10-25 HIGH 8.8 CVE-2021-34857 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must firs… Parallels Desktop Patch available Fix from $1,9502021-10-25 HIGH 8.8 CVE-2021-34859EPSS 9% This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required … Teamviewer Patch available Fix from $1,9502021-10-25 MEDIUM 6.7 CVE-2021-0633 In display driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Sy… Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 6.7 CVE-2021-0661 In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 6.7 CVE-2021-0662 In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002021-10-25 MEDIUM 6.7 CVE-2021-0663 In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System … Android Mitigation only Fix from $1,6002021-10-25