Vulnerabilities (CVE)

Filtered by NVD-CWE-noinfo
Total 16115 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-38199 1 Linux 1 Linux Kernel 2021-09-25 3.3 LOW 6.5 MEDIUM
fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection.
CVE-2021-36969 1 Microsoft 9 Windows 10, Windows 7, Windows 8.1 and 6 more 2021-09-25 2.1 LOW 5.5 MEDIUM
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38635, CVE-2021-38636.
CVE-2021-36972 1 Microsoft 7 Windows 10, Windows 8.1, Windows Rt 8.1 and 4 more 2021-09-25 2.1 LOW 5.5 MEDIUM
Windows SMB Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-36960.
CVE-2021-36965 1 Microsoft 9 Windows 10, Windows 7, Windows 8.1 and 6 more 2021-09-25 7.5 HIGH 9.8 CRITICAL
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
CVE-2021-27919 1 Golang 1 Go 2021-09-25 4.3 MEDIUM 5.5 MEDIUM
archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any filename.
CVE-2021-28695 2 Fedoraproject, Xen 2 Fedora, Xen 2021-09-24 4.6 MEDIUM 6.8 MEDIUM
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of memory which should be left untranslated, which typically means these addresses should pass the translation phase unaltered. While these are typically device specific ACPI properties, they can also be specified to apply to a range of devices, or even all devices. On all systems with such regions Xen failed to prevent guests from undoing/replacing such mappings (CVE-2021-28694). On AMD systems, where a discontinuous range is specified by firmware, the supposedly-excluded middle range will also be identity-mapped (CVE-2021-28695). Further, on AMD systems, upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore (CVE-2021-28696).
CVE-2021-30582 2 Fedoraproject, Google 2 Fedora, Chrome 2021-09-24 4.3 MEDIUM 6.5 MEDIUM
Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2021-30618 2 Fedoraproject, Google 2 Fedora, Chrome 2021-09-24 6.8 MEDIUM 8.8 HIGH
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
CVE-2021-30617 2 Fedoraproject, Google 2 Fedora, Chrome 2021-09-24 4.3 MEDIUM 6.5 MEDIUM
Chromium: CVE-2021-30617 Policy bypass in Blink
CVE-2021-30587 2 Fedoraproject, Google 2 Fedora, Chrome 2021-09-24 4.3 MEDIUM 4.3 MEDIUM
Inappropriate implementation in Compositing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2021-30620 2 Fedoraproject, Google 2 Fedora, Chrome 2021-09-24 6.8 MEDIUM 8.8 HIGH
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
CVE-2021-28699 2 Fedoraproject, Xen 2 Fedora, Xen 2021-09-24 4.9 MEDIUM 5.5 MEDIUM
inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retrieve the addresses that the new status tracking table can be accessed through. For 32-bit guests on x86, translation of requests has to occur because the interface structure layouts commonly differ between 32- and 64-bit. The translation of the request to obtain the frame numbers of the grant status table involves translating the resulting array of frame numbers. Since the space used to carry out the translation is limited, the translation layer tells the core function the capacity of the array within translation space. Unfortunately the core function then only enforces array bounds to be below 8 times the specified value, and would write past the available space if enough frame numbers needed storing.
CVE-2021-38644 1 Microsoft 1 Mpeg-2 Video Extension 2021-09-24 6.8 MEDIUM 7.8 HIGH
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
CVE-2021-38660 1 Microsoft 1 Excel 2021-09-24 6.8 MEDIUM 7.8 HIGH
Microsoft Office Graphics Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38658.
CVE-2021-38659 1 Microsoft 1 365 Apps 2021-09-24 6.8 MEDIUM 7.8 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-38657 1 Microsoft 1 365 Apps 2021-09-24 2.1 LOW 5.5 MEDIUM
Microsoft Office Graphics Component Information Disclosure Vulnerability
CVE-2021-38661 1 Microsoft 1 Hevc Video Extensions 2021-09-24 6.8 MEDIUM 7.8 HIGH
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-38646 1 Microsoft 2 365 Apps, Office 2021-09-24 6.8 MEDIUM 7.8 HIGH
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVE-2021-40444 1 Microsoft 9 Windows 10, Windows 7, Windows 8.1 and 6 more 2021-09-24 6.8 MEDIUM 7.8 HIGH
Microsoft MSHTML Remote Code Execution Vulnerability
CVE-2021-40448 1 Microsoft 1 Accessibility Insights For Android 2021-09-24 4.3 MEDIUM 5.5 MEDIUM
Microsoft Accessibility Insights for Android Information Disclosure Vulnerability