2021

Windows User Profile Service Elevation of Privilege Vulnerability

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corru

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free B

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple syst

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap co

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corru

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and exe

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Print Spooler Remote Code Execution Vulnerability

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an auth

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker

A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to

. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information d

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivi

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are m

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon A

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to po

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap co

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

Win32k Elevation of Privilege Vulnerability

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload a

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security U

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-00

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all vers

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap cor

Internet Explorer Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Internet Explorer Memory Corruption Vulnerability

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corrupti

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authenticat

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires suc

Windows Win32k Elevation of Privilege Vulnerability

Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version i