| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-0925 | Hig | 0.49 | 7.5 | 0.01 | Dec 15, 2021 | In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed.… | ||
| CVE-2021-0924 | Hig | 0.51 | 7.8 | 0.00 | Dec 15, 2021 | In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2021-0923 | Hig | 0.51 | 7.8 | 0.00 | Dec 15, 2021 | In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2021-0922 | Hig | 0.51 | 7.8 | 0.00 | Dec 15, 2021 | In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROFILES permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User… | ||
| CVE-2021-0921 | Hig | 0.51 | 7.8 | 0.00 | Dec 15, 2021 | In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed… | ||
| CVE-2021-0918 | Hig | 0.57 | 8.8 | 0.00 | Dec 15, 2021 | In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2021-0799 | Hig | 0.51 | 7.8 | 0.00 | Dec 15, 2021 | In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:… | ||
| CVE-2021-0769 | Hig | 0.47 | 7.3 | 0.00 | Dec 15, 2021 | In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:… | ||
| CVE-2021-0675 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID:… | ||
| CVE-2021-0649 | Hig | 0.51 | 7.8 | 0.00 | Dec 15, 2021 | In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution privileges needed. User interaction is not needed for exploitation.Product:… | ||
| CVE-2021-0434 | Hig | 0.47 | 7.3 | 0.00 | Dec 15, 2021 | In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with… | ||
| CVE-2021-44657 | Hig | 0.57 | 8.8 | 0.03 | Dec 15, 2021 | In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of unsafe system commands. Jinja does not enable sandboxed mode by default due to backwards compatibility. Stackstorm now sets sandboxed mode for jinja by default. | ||
| CVE-2021-43893 | Hig | 0.49 | 7.5 | 0.07 | Dec 15, 2021 | Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | ||
| CVE-2021-43892 | Hig | 0.48 | 7.4 | 0.03 | Dec 15, 2021 | Microsoft BizTalk ESB Toolkit Spoofing Vulnerability | ||
| CVE-2021-43891 | Hig | 0.52 | 7.8 | 0.13 | Dec 15, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-43890 | Hig | 0.65 | 7.1 | 0.11 | KEV | Dec 15, 2021 | We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as… | |
| CVE-2021-43889 | Hig | 0.47 | 7.2 | 0.02 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability | ||
| CVE-2021-43888 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Defender for IoT Information Disclosure Vulnerability | ||
| CVE-2021-43883 | Hig | 0.52 | 7.8 | 0.12 | Dec 15, 2021 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2021-43877 | Hig | 0.57 | 8.8 | 0.01 | Dec 15, 2021 | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2021-43875 | Hig | 0.51 | 7.8 | 0.05 | Dec 15, 2021 | Microsoft Office Graphics Remote Code Execution Vulnerability | ||
| CVE-2021-43518 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of… | ||
| CVE-2021-43256 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-43248 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Digital Media Receiver Elevation of Privilege Vulnerability | ||
| CVE-2021-43247 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows TCP/IP Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-43245 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Digital TV Tuner Elevation of Privilege Vulnerability | ||
| CVE-2021-43242 | Hig | 0.50 | 7.6 | 0.01 | Dec 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-43240 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | NTFS Set Short Name Elevation of Privilege Vulnerability | ||
| CVE-2021-43239 | Hig | 0.46 | 7.1 | 0.01 | Dec 15, 2021 | Windows Recovery Environment Agent Elevation of Privilege Vulnerability | ||
| CVE-2021-43238 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Remote Access Elevation of Privilege Vulnerability | ||
| CVE-2021-43237 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Setup Elevation of Privilege Vulnerability | ||
| CVE-2021-43236 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Message Queuing Information Disclosure Vulnerability | ||
| CVE-2021-43234 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Windows Fax Service Remote Code Execution Vulnerability | ||
| CVE-2021-43233 | Hig | 0.49 | 7.5 | 0.02 | Dec 15, 2021 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2021-43232 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Windows Event Tracing Remote Code Execution Vulnerability | ||
| CVE-2021-43231 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-43230 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-43229 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Windows NTFS Elevation of Privilege Vulnerability | ||
| CVE-2021-43228 | Hig | 0.49 | 7.5 | 0.04 | Dec 15, 2021 | SymCrypt Denial of Service Vulnerability | ||
| CVE-2021-43226 | Hig | 0.69 | 7.8 | 0.03 | KEV | Dec 15, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2021-43225 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Bot Framework SDK Remote Code Execution Vulnerability | ||
| CVE-2021-43223 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2021-43222 | Hig | 0.49 | 7.5 | 0.03 | Dec 15, 2021 | Microsoft Message Queuing Information Disclosure Vulnerability | ||
| CVE-2021-43219 | Hig | 0.48 | 7.4 | 0.04 | Dec 15, 2021 | DirectX Graphics Kernel File Denial of Service Vulnerability | ||
| CVE-2021-43217 | Hig | 0.53 | 8.1 | 0.07 | Dec 15, 2021 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability | ||
| CVE-2021-43214 | Hig | 0.51 | 7.8 | 0.02 | Dec 15, 2021 | Web Media Extensions Remote Code Execution Vulnerability | ||
| CVE-2021-43207 | Hig | 0.51 | 7.8 | 0.01 | Dec 15, 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-42320 | Hig | 0.52 | 8.0 | 0.02 | Dec 15, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-42315 | Hig | 0.57 | 8.8 | 0.02 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability | ||
| CVE-2021-42314 | Hig | 0.57 | 8.8 | 0.02 | Dec 15, 2021 | Microsoft Defender for IoT Remote Code Execution Vulnerability |
- risk 0.49cvss 7.5epss 0.01
In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure due to a limited change in behavior based on the out of bounds data with no additional execution privileges needed.…
- risk 0.51cvss 7.8epss 0.00
In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- risk 0.51cvss 7.8epss 0.00
In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.51cvss 7.8epss 0.00
In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PROFILES permission due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User…
- risk 0.51cvss 7.8epss 0.00
In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…
- risk 0.57cvss 8.8epss 0.00
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.51cvss 7.8epss 0.00
In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:…
- risk 0.47cvss 7.3epss 0.00
In onCreate of AllowBindAppWidgetActivity.java, there is a possible bypass of user interaction requirements due to unclear UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:…
- risk 0.51cvss 7.8epss 0.01
In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID:…
- risk 0.51cvss 7.8epss 0.00
In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to local escalation of privilege CONTROL_ALWAYS_ON_VPN with no additional execution privileges needed. User interaction is not needed for exploitation.Product:…
- risk 0.47cvss 7.3epss 0.00
In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth device to acquire permissions based on insufficient information presented to the user in the consent dialog. This could lead to local escalation of privilege with…
- risk 0.57cvss 8.8epss 0.03
In StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus allows execution of unsafe system commands. Jinja does not enable sandboxed mode by default due to backwards compatibility. Stackstorm now sets sandboxed mode for jinja by default.
- risk 0.49cvss 7.5epss 0.07
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.03
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability
- risk 0.52cvss 7.8epss 0.13
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.65cvss 7.1epss 0.11
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as…
- risk 0.47cvss 7.2epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Defender for IoT Information Disclosure Vulnerability
- risk 0.52cvss 7.8epss 0.12
Windows Installer Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.05
Microsoft Office Graphics Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of…
- risk 0.51cvss 7.8epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Digital Media Receiver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows TCP/IP Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Digital TV Tuner Elevation of Privilege Vulnerability
- risk 0.50cvss 7.6epss 0.01
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.01
NTFS Set Short Name Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.01
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Setup Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Message Queuing Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Fax Service Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Event Tracing Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows NTFS Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.04
SymCrypt Denial of Service Vulnerability
- risk 0.69cvss 7.8epss 0.03
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Bot Framework SDK Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Microsoft Message Queuing Information Disclosure Vulnerability
- risk 0.48cvss 7.4epss 0.04
DirectX Graphics Kernel File Denial of Service Vulnerability
- risk 0.53cvss 8.1epss 0.07
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Web Media Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.52cvss 8.0epss 0.02
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Defender for IoT Remote Code Execution Vulnerability