Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38007 State: PUBLISHED Published: 2021-12-23T00:05:36 Last Updated: 2024-08-04T01:30:09.347Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1254189 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38008 State: PUBLISHED Published: 2021-12-23T00:05:38 Last Updated: 2024-08-04T01:30:09.142Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1263620 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 -
e%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1398
CVE ID: CVE-2021-38009 State: PUBLISHED Published: 2021-12-23T00:05:39 Last Updated: 2024-08-04T01:30:09.208Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1260649 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2
package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38010 State: PUBLISHED Published: 2021-12-23T00:05:41 Last Updated: 2024-08-04T01:30:09.091Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1264477 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZ
7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38011 State: PUBLISHED Published: 2021-12-23T00:05:42 Last Updated: 2024-08-04T01:30:09.211Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1268274 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/202
CVE ID: CVE-2021-38012 State: PUBLISHED Published: 2021-12-23T00:05:44 Last Updated: 2024-08-04T01:30:09.205Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1262791 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38013 State: PUBLISHED Published: 2021-12-23T00:05:45 Last Updated: 2024-08-04T01:30:09.077Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1242392 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mess
ttps://crbug.com/1242392 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38014 State: PUBLISHED Published: 2021-12-23T00:05:47 Last Updated: 2024-08-04T01:30:09.202Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1248567 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/
CVE ID: CVE-2021-38015 State: PUBLISHED Published: 2021-12-23T00:05:48 Last Updated: 2024-08-04T01:30:09.059Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/957553 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT
ug.com/957553 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38016 State: PUBLISHED Published: 2021-12-23T00:05:50 Last Updated: 2024-08-04T01:30:09.016Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1244289 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.d
t.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38017 State: PUBLISHED Published: 2021-12-23T00:05:51 Last Updated: 2024-08-04T01:30:09.143Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1256822 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://ww
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38018 State: PUBLISHED Published: 2021-12-23T00:05:53 Last Updated: 2024-08-04T01:30:09.279Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1197889 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/secu
/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38019 State: PUBLISHED Published: 2021-12-23T00:05:54 Last Updated: 2024-08-04T01:30:09.033Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1251179 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/secur
list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38020 State: PUBLISHED Published: 2021-12-23T00:05:55 Last Updated: 2024-08-04T01:30:09.191Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1259694 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38021 State: PUBLISHED Published: 2021-12-23T00:05:57 Last Updated: 2024-08-04T01:30:09.179Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1233375 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org
hives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38022 State: PUBLISHED Published: 2021-12-23T00:05:59 Last Updated: 2024-08-04T01:30:09.038Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1248862 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.or
chives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-38023 State: PUBLISHED Published: 2024-09-23T21:56:31.209Z Last Updated: 2024-09-24T17:47:37.300Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issues.chromium.org/issues/40056265
CVE ID: CVE-2021-38084 State: PUBLISHED Published: 2021-08-03T21:22:29 Last Updated: 2024-08-04T01:30:09.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/courier/mailman/courier-imap/thread/cone.1382574216.483027.8082.1000%40monster.email-scan.com/#msg31555583 - https://sourceforge.net/p/courier/mailman/message/37329216/
CVE ID: CVE-2021-38085 State: PUBLISHED Published: 2021-08-11T17:39:38 Last Updated: 2024-08-04T01:30:09.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CNMurGE.dll and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. This occurs because the driver drops a world-writable DLL into a CanonBJ %PROGRAMDATA% location that gets loaded by printisolationhost (a system process). Additional Analyst Notes: - CVE Program Container: References: - https://defcon.org/htm
solationhost (a system process). Additional Analyst Notes: - CVE Program Container: References: - https://defcon.org/html/defcon-29/dc-29-speakers.html#baines - http://packetstormsecurity.com/files/163795/Canon-TR150-Driver-3.71.2.10-Privilege-Escalation.html - https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_03.txt - https://www.youtube.com/watch?v=vdesswZYz-8
CVE ID: CVE-2021-38086 State: PUBLISHED Published: 2021-08-12T13:42:45 Last Updated: 2024-08-04T01:30:09.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking. Additional Analyst Notes: - CVE Program Container: References: - https://kb.acronis.com/content/68564
CVE ID: CVE-2021-38087 State: PUBLISHED Published: 2021-08-12T13:44:09 Last Updated: 2024-08-04T01:30:09.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected cross-site scripting (XSS) was possible on the login page in Acronis Cyber Protect 15 prior to build 27009. Additional Analyst Notes: - CVE Program Container: References: - https://kb.acronis.com/content/68564
CVE ID: CVE-2021-38088 State: PUBLISHED Published: 2021-08-12T13:38:10 Last Updated: 2024-08-04T01:30:09.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking. Additional Analyst Notes: - CVE Program Container: References: - https://kb.acronis.com/content/68564
CVE ID: CVE-2021-38089 State: REJECTED Published: 2021-09-20T15:20:01 Last Updated: 2021-09-27T15:51:15 Description: No description available.
CVE ID: CVE-2021-38090 State: PUBLISHED Published: 2021-09-20T15:20:01 Last Updated: 2024-08-04T01:30:09.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8263 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE ID: CVE-2021-38091 State: PUBLISHED Published: 2021-09-20T15:20:01 Last Updated: 2024-08-04T01:30:09.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8263 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE ID: CVE-2021-38092 State: PUBLISHED Published: 2021-09-20T15:20:02 Last Updated: 2024-08-04T01:30:09.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8263 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE ID: CVE-2021-38093 State: PUBLISHED Published: 2021-09-20T15:20:03 Last Updated: 2024-08-04T01:30:09.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8263 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE ID: CVE-2021-38094 State: PUBLISHED Published: 2021-09-20T15:20:03 Last Updated: 2024-08-04T01:30:09.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. Additional Analyst Notes: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/8263 - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE ID: CVE-2021-38095 State: PUBLISHED Published: 2021-08-05T12:23:33 Last Updated: 2024-08-04T01:30:09.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST API in Planview Spigit 4.5.3 allows remote unauthenticated attackers to query sensitive user accounts data, as demonstrated by an api/v1/users/1 request. Additional Analyst Notes: - CVE Program Container: References: - https://www.planview.com/products-solutions/products/spigit/ - https://github.com/FlaviuPopescu/Spigit-PoC
CVE ID: CVE-2021-38096 State: PUBLISHED Published: 2021-10-01T18:02:55 Last Updated: 2024-08-04T01:30:09.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-025 - https://www.fortinet.com/blog/threat-research/fortinet-secur
rences: - https://www.fortiguard.com/zeroday/FG-VD-21-025 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38097 State: PUBLISHED Published: 2021-10-01T17:50:29 Last Updated: 2024-08-04T01:30:09.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-026 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher
s://www.fortiguard.com/zeroday/FG-VD-21-026 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38098 State: PUBLISHED Published: 2021-10-01T22:53:28 Last Updated: 2024-08-04T01:30:09.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-027 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-disc
ww.fortiguard.com/zeroday/FG-VD-21-027 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38099 State: PUBLISHED Published: 2021-10-01T18:05:23 Last Updated: 2024-08-04T01:30:09.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. This is different from CVE-2021-38101. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-030 - http
Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-030 - https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-products
CVE ID: CVE-2021-38100 State: PUBLISHED Published: 2021-10-01T22:55:03 Last Updated: 2024-08-04T01:30:09.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious CPT file. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-029 - https://www.fortinet.com/blog/threat-research/fortinet-se