Browse CVEs

HIGH 7.5 CVE-2021-39987 The HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause a process to restart. Harmonyos 2.0+ Fix from $1,9502022-01-03 HIGH 8.8 CVE-2021-4078 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 96.0.4664.93+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-38012 Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 96.0.4664.45+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-4056 Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 96.0.4664.93+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-4061 Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 96.0.4664.93+ Fix from $1,9502021-12-23 HIGH 8.8 CVE-2021-38007 Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 96.0.4664.45+ Fix from $1,9502021-12-23 CRITICAL 9.8 CVE-2021-24045 A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. Note that this is o… Hermes 0.10.0+ Fix from $2,3002021-12-13 HIGH 8.8 CVE-2021-38001EPSS 27% Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 95.0.4638.69+ Fix from $1,9502021-11-23 MEDIUM 5.0 CVE-2021-41190 The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specific… Fedora after 1.0.1 Fix from $1,6002021-11-17 HIGH 7.5 CVE-2021-40871 An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service (DoS) by sending c… Datafeed Opc Suite 5.18 / 5.66+ Fix from $1,9502021-11-10 HIGH 7.5 CVE-2021-40872 An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login… Smartlink Hw Dp 1.40+ Fix from $1,9502021-11-10 MEDIUM 5.3 CVE-2021-31344 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303),… Capital Vstar 4.1.1 / 2017.02.1+ Fix from $1,6002021-11-09 MEDIUM 6.1 CVE-2021-23472 This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the in… Bootstrap Table 1.19.1+ Fix from $1,6002021-11-03 CRITICAL 9.8 CVE-2021-23509 This affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used… Json Ptr 3.0.0+ Fix from $2,3002021-11-03 CRITICAL 9.8 CVE-2021-23624 This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used i… Dotty 0.1.2+ Fix from $2,3002021-11-03 CRITICAL 9.8 CVE-2021-23807 This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the… Jsonpointer 5.0.0+ Fix from $2,3002021-11-03 CRITICAL 9.8 CVE-2021-23820 This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components a… Json Pointer 0.6.2+ Fix from $2,3002021-11-03 HIGH 8.8 CVE-2018-6122 Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 66.0.3359.139+ Fix from $1,9502021-11-02 HIGH 8.8 CVE-2021-30818 A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Sa… Safari 8.0 / 12.0.1+ Fix from $1,9502021-10-28 HIGH 8.8 CVE-2021-30627 Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 93.0.4577.82+ Fix from $1,9502021-10-08 MEDIUM 6.1 CVE-2021-23447 This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an arr… Teddy 0.5.9+ Fix from $1,6002021-10-07 HIGH 7.8 CVE-2021-39841EPSS 12% Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Type Confusi… Acrobat after 21.005.20060 Fix from $1,9502021-09-29 MEDIUM 6.1 CVE-2021-23443 This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered … Edge 5.3.2+ Fix from $1,6002021-09-21 CRITICAL 9.8 CVE-2021-23444 This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used… Jointjs 3.4.2+ Fix from $2,3002021-09-21 MEDIUM 6.3 CVE-2021-39219 Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusion vulnerability. As a Rust li… Fedora 0.30.0+ Fix from $1,6002021-09-17 HIGH 7.8 CVE-2021-38658EPSS 6% Microsoft Office Graphics Remote Code Execution Vulnerability Office Patch available Fix from $1,9502021-09-15 CRITICAL 9.8 CVE-2021-23440 This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user… Set Value 2.0.1 / 4.0.1+ Fix from $2,3002021-09-12 CRITICAL 9.8 CVE-2021-1829 A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute a… macOS 11.3+ Fix from $2,3002021-09-08 HIGH 8.8 CVE-2021-30758 A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, t… Safari 7.6 / 11.5+ Fix from $1,9502021-09-08 CRITICAL 9.8 CVE-2021-23438 This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition igno… Mpath 0.8.4+ Fix from $2,3002021-09-01