Vulnerabilities

Tracked app vulnerabilities

2,321 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2021-38497 MEDIUM 6.5 Network 1 apps 2021-11-03 Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusi…	MEDIUM 6.5	Network	—	1	2021-11-03	Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusi…
CVE-2021-38492 MEDIUM 6.5 Network 1 apps 2021-11-03 When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in In…	MEDIUM 6.5	Network	—	1	2021-11-03	When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in In…
CVE-2021-0922 MEDIUM 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	—	—	2021-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-0919 MEDIUM 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	—	—	2021-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-41795 MEDIUM 6.5 Network 1 apps 2021-09-29 The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable compo…	MEDIUM 6.5	Network	—	1	2021-09-29	The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass. By targeting a vulnerable compo…
CVE-2021-38637 MEDIUM 5.5 Local 2021-09-15 Windows Storage Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows Storage Information Disclosure Vulnerability
CVE-2021-38636 MEDIUM 5.5 Local 2021-09-15 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
CVE-2021-38635 MEDIUM 5.5 Local 2021-09-15 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
CVE-2021-38632 MEDIUM 5.7 Physical 2021-09-15 Windows BitLocker Security Feature Bypass Vulnerability	MEDIUM 5.7	Physical	—	—	2021-09-15	Windows BitLocker Security Feature Bypass Vulnerability
CVE-2021-38629 MEDIUM 6.5 Network 2021-09-15 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability	MEDIUM 6.5	Network	—	—	2021-09-15	Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
CVE-2021-38624 MEDIUM 6.5 Network 2021-09-15 Windows Key Storage Provider Security Feature Bypass Vulnerability	MEDIUM 6.5	Network	—	—	2021-09-15	Windows Key Storage Provider Security Feature Bypass Vulnerability
CVE-2021-36972 MEDIUM 5.5 Local 2021-09-15 Windows SMB Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows SMB Information Disclosure Vulnerability
CVE-2021-36969 MEDIUM 5.5 Local 2021-09-15 Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
CVE-2021-36962 MEDIUM 5.5 Local 2021-09-15 Windows Installer Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows Installer Information Disclosure Vulnerability
CVE-2021-36961 MEDIUM 5.5 Local 2021-09-15 Windows Installer Denial of Service Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows Installer Denial of Service Vulnerability
CVE-2021-36959 MEDIUM 5.5 Local 2021-09-15 Windows Authenticode Spoofing Vulnerability	MEDIUM 5.5	Local	—	—	2021-09-15	Windows Authenticode Spoofing Vulnerability
CVE-2021-40529 MEDIUM 5.9 Network 1 apps 2021-09-06 The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between tw…	MEDIUM 5.9	Network	—	1	2021-09-06	The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between tw…
CVE-2021-0691 MEDIUM 2021-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	—	—	2021-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-29987 MEDIUM 6.5 Network 1 apps 2021-08-17 After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still…	MEDIUM 6.5	Network	—	1	2021-08-17	After requesting multiple permissions, and closing the first permission panel, subsequent permission panels will be displayed in a different position but still…
CVE-2021-29982 MEDIUM 6.5 Network 1 apps 2021-08-17 Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. Th…	MEDIUM 6.5	Network	—	1	2021-08-17	Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. Th…
CVE-2021-36938 MEDIUM 5.5 Local 2021-08-12 Windows Cryptographic Primitives Library Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-08-12	Windows Cryptographic Primitives Library Information Disclosure Vulnerability
CVE-2021-34534 MEDIUM 6.8 Network 2021-08-12 Windows MSHTML Platform Remote Code Execution Vulnerability	MEDIUM 6.8	Network	—	—	2021-08-12	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-34480 MEDIUM 6.8 Network 2021-08-12 Scripting Engine Memory Corruption Vulnerability	MEDIUM 6.8	Network	—	—	2021-08-12	Scripting Engine Memory Corruption Vulnerability
CVE-2021-38204 MEDIUM 6.8 2021-08-10 drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) …	MEDIUM 6.8	—	—	—	2021-08-10	drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) …
CVE-2021-29969 MEDIUM 5.9 Network 1 apps 2021-08-05 If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS ha…	MEDIUM 5.9	Network	—	1	2021-08-05	If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion of the STARTTLS ha…
CVE-2021-36769 MEDIUM 5.3 Network 2 apps 2021-07-17 A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the ser…	MEDIUM 5.3	Network	—	2	2021-07-17	A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the ser…
CVE-2021-34466 MEDIUM 5.7 Physical 2021-07-16 Windows Hello Security Feature Bypass Vulnerability	MEDIUM 5.7	Physical	—	—	2021-07-16	Windows Hello Security Feature Bypass Vulnerability
CVE-2021-34457 MEDIUM 5.5 Local 2021-07-16 Windows Remote Access Connection Manager Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-16	Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-34454 MEDIUM 5.5 Local 2021-07-16 Windows Remote Access Connection Manager Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-16	Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-34448 MEDIUM 6.8 KEV Network 2021-07-16 Scripting Engine Memory Corruption Vulnerability	MEDIUM 6.8	Network	KEV	—	2021-07-16	Scripting Engine Memory Corruption Vulnerability
CVE-2021-34447 MEDIUM 6.8 Network 2021-07-16 Windows MSHTML Platform Remote Code Execution Vulnerability	MEDIUM 6.8	Network	—	—	2021-07-16	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-34444 MEDIUM 6.5 Network 2021-07-16 Windows DNS Server Denial of Service Vulnerability	MEDIUM 6.5	Network	—	—	2021-07-16	Windows DNS Server Denial of Service Vulnerability
CVE-2021-34440 MEDIUM 5.5 Local 2021-07-16 GDI+ Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-16	GDI+ Information Disclosure Vulnerability
CVE-2021-34509 MEDIUM 5.5 Local 2021-07-14 Storage Spaces Controller Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-14	Storage Spaces Controller Information Disclosure Vulnerability
CVE-2021-34507 MEDIUM 6.5 Network 2021-07-14 Windows Remote Assistance Information Disclosure Vulnerability	MEDIUM 6.5	Network	—	—	2021-07-14	Windows Remote Assistance Information Disclosure Vulnerability
CVE-2021-34500 MEDIUM 6.3 Network 2021-07-14 Windows Kernel Memory Information Disclosure Vulnerability	MEDIUM 6.3	Network	—	—	2021-07-14	Windows Kernel Memory Information Disclosure Vulnerability
CVE-2021-34499 MEDIUM 6.5 Network 2021-07-14 Windows DNS Server Denial of Service Vulnerability	MEDIUM 6.5	Network	—	—	2021-07-14	Windows DNS Server Denial of Service Vulnerability
CVE-2021-34497 MEDIUM 6.8 Network 2021-07-14 Windows MSHTML Platform Remote Code Execution Vulnerability	MEDIUM 6.8	Network	—	—	2021-07-14	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-34496 MEDIUM 5.5 Local 2021-07-14 Windows GDI Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-14	Windows GDI Information Disclosure Vulnerability
CVE-2021-34493 MEDIUM 6.7 Local 2021-07-14 Windows Partition Management Driver Elevation of Privilege Vulnerability	MEDIUM 6.7	Local	—	—	2021-07-14	Windows Partition Management Driver Elevation of Privilege Vulnerability
CVE-2021-34491 MEDIUM 5.5 Local 2021-07-14 Win32k Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-14	Win32k Information Disclosure Vulnerability
CVE-2021-33783 MEDIUM 6.5 Network 2021-07-14 Windows SMB Information Disclosure Vulnerability	MEDIUM 6.5	Network	—	—	2021-07-14	Windows SMB Information Disclosure Vulnerability
CVE-2021-33782 MEDIUM 5.5 Local 2021-07-14 Windows Authenticode Spoofing Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-14	Windows Authenticode Spoofing Vulnerability
CVE-2021-33765 MEDIUM 6.2 Local 2021-07-14 Windows Installer Spoofing Vulnerability	MEDIUM 6.2	Local	—	—	2021-07-14	Windows Installer Spoofing Vulnerability
CVE-2021-33764 MEDIUM 5.9 Network 2021-07-14 Windows Key Distribution Center Information Disclosure Vulnerability	MEDIUM 5.9	Network	—	—	2021-07-14	Windows Key Distribution Center Information Disclosure Vulnerability
CVE-2021-33763 MEDIUM 5.5 Local 2021-07-14 Windows Remote Access Connection Manager Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-14	Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2021-33760 MEDIUM 5.5 Local 2021-07-14 Media Foundation Information Disclosure Vulnerability	MEDIUM 5.5	Local	—	—	2021-07-14	Media Foundation Information Disclosure Vulnerability
CVE-2021-33757 MEDIUM 5.3 Network 2021-07-14 Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability	MEDIUM 5.3	Network	—	—	2021-07-14	Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
CVE-2021-33755 MEDIUM 6.3 Network 2021-07-14 Windows Hyper-V Denial of Service Vulnerability	MEDIUM 6.3	Network	—	—	2021-07-14	Windows Hyper-V Denial of Service Vulnerability
CVE-2021-33745 MEDIUM 6.5 Network 2021-07-14 Windows DNS Server Denial of Service Vulnerability	MEDIUM 6.5	Network	—	—	2021-07-14	Windows DNS Server Denial of Service Vulnerability