← All advisories

High severity8.8NVD Advisory· Published Feb 16, 2021· Updated Jun 17, 2026

CVE-2021-27229

CVE-2021-27229

Description

Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Mumble/Mumble2 versions
cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*range: <1.3.4
- (no CPE)range: <1.3.4
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Mumble/Mumbledescription
osv-coords
pkg:rpm/opensuse/mumble&distro=openSUSE%20Tumbleweed
Range: < 1.3.4-2.7

Patches

Vulnerability mechanics

References

5

github.com/mumble-voip/mumble/commit/e59ee87abe249f345908c7d568f6879d16bfd648nvdPatchThird Party Advisory
github.com/mumble-voip/mumble/compare/1.3.3...1.3.4nvdPatchThird Party Advisory
github.com/mumble-voip/mumble/pull/4733nvdPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2021/02/msg00022.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202105-13nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.