Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eam. XStream 1.4.19 monitors and accumulates the time it takes to add elements to collections and throws an exception if a set threshold is exceeded. Users are advised to upgrade as soon as possible. Users unable to upgrade may set the NO_REFERENCE mode to prevent recursion. See GHSA-rmr5-cpv2-vgjf for further details on a workaround if an upgrade is not possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf - https://github.com/x-stream/xstream/commit/e8e88621ba1c85ac3b8620337dd672e0c0c3a846 - https://x-stream.github.io/CVE-2021-43859.html - http://www.openwall.com/lists/
e88621ba1c85ac3b8620337dd672e0c0c3a846 - https://x-stream.github.io/CVE-2021-43859.html - http://www.openwall.com/lists/oss-security/2022/02/09/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XODFRE2ZL64FICBJDOPWOLPTSSAI4U7X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VACQYG356OHUTD5WQGAQ4L2TTFTAV3SJ/ - https://lists.debian.org/debian-lts-announce/2022/02/msg00018.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-43860 State: PUBLISHED Published: 2022-01-12T00:00:00 Last Updated: 2024-08-04T04:10:17.171Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: flatpak Products: flatpak Problem Types: CWE-269 Description: Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions granted to the app at runtime, in the case that there's a null byte in the metadata file of an app. Therefore apps can grant themselves permissions without the consent of the user. Flatpak shows permissions t
of an app. Therefore apps can grant themselves permissions without the consent of the user. Flatpak shows permissions to the user during install by reading them from the "xa.metadata" key in the commit metadata. This cannot contain a null terminator, because it is an untrusted GVariant. Flatpak compares these permissions to the *actual* metadata, from the "metadata" file to ensure it wasn't lied to. However, the actual metadata contents are loaded in several places where they are read as simple C-style strings. That means that, if the metadata file includes a null terminator, only the content of the file from *before* the terminator gets compared to xa.metadata. Thus, any permissions that a
or, only the content of the file from *before* the terminator gets compared to xa.metadata. Thus, any permissions that appear in the metadata file after a null terminator are applied at runtime but not shown to the user. So maliciously crafted apps can give themselves hidden permissions. Users who have Flatpaks installed from untrusted sources are at risk in case the Flatpak has a maliciously crafted metadata file, either initially or in an update. This issue is patched in versions 1.12.3 and 1.10.6. As a workaround, users can manually check the permissions of installed apps by checking the metadata file or the xa.metadata key on the commit metadata. Additional Analyst Notes: - CVE Program C
s by checking the metadata file or the xa.metadata key on the commit metadata. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j - https://github.com/flatpak/flatpak/commit/54ec1a482dfc668127eaae57f135e6a8e0bc52da - https://github.com/flatpak/flatpak/commit/65cbfac982cb1c83993a9e19aa424daee8e9f042 - https://github.com/flatpak/flatpak/commit/93357d357119093804df05acc32ff335839c6451 - https://github.com/flatpak/flatpak/commit/ba818f504c926baaf6e362be8159cfacf994310e - https://github.com/flatpak/flatpak/commit/d9a8f9d8ccc0b7c1135d0ecde006a75d25f66aee - https://github.com/flatpak/flatpak/releases/tag/1.10.6
flatpak/flatpak/commit/d9a8f9d8ccc0b7c1135d0ecde006a75d25f66aee - https://github.com/flatpak/flatpak/releases/tag/1.10.6 - https://github.com/flatpak/flatpak/releases/tag/1.12.3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APFTBYGJJVJPFVHRXUW5PII5XOAFI4KH/ - https://www.debian.org/security/2022/dsa-5049 - https://security.gentoo.org/glsa/202312-12
CVE ID: CVE-2021-43861 State: PUBLISHED Published: 2021-12-30T13:40:11 Last Updated: 2024-08-04T04:10:17.137Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: mermaid-js Products: mermaid Problem Types: CWE-79, CWE-20 Description: Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers' machines. Users should upgrade to version 8.13.8 to receive a patch. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - http
ere are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mermaid-js/mermaid/security/advisories/GHSA-p3rp-vmj9-gv6v - https://github.com/mermaid-js/mermaid/commit/066b7a0d0bda274d94a2f2d21e4323dab5776d83 - https://github.com/mermaid-js/mermaid/releases/tag/8.13.8
CVE ID: CVE-2021-43862 State: PUBLISHED Published: 2021-12-30T14:15:12 Last Updated: 2024-08-04T04:10:17.110Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: jcubic Products: jquery.terminal Problem Types: CWE-80 Description: jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting (XSS) vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code the victim sees. If the application uses the `execHash` option and executes code from URL, the attacker can use this URL to execute their code.
application uses the `execHash` option and executes code from URL, the attacker can use this URL to execute their code. The scope is limited because the javascript attribute used is added to span tag, so no automatic execution like with `onerror` on images is possible. This issue is fixed in version 2.31.1. As a workaround, the user can use formatting that wrap whole user input and its no op. The code for this workaround is available in the GitHub Security Advisory. The fix will only work when user of the library is not using different formatters (e.g. to highlight code in different way). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jcubic/jquery.termi
different way). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jcubic/jquery.terminal/security/advisories/GHSA-x9r5-jxvq-4387 - https://github.com/jcubic/jquery.terminal/issues/727 - https://github.com/jcubic/jquery.terminal/commit/77eb044d0896e990d48a9157f0bc6648f81a84b5 - https://github.com/jcubic/jquery.terminal/releases/tag/2.31.1
CVE ID: CVE-2021-43863 State: PUBLISHED Published: 2022-01-25T15:25:11.000Z Last Updated: 2025-04-23T19:09:19.632Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: nextcloud Products: android Problem Types: CWE-89 Description: The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers `FileContentProvider` and `DiskLruImageCacheFileProvider` have security issues (an SQL injection, and an insufficient permission control, respectively) that allow malicious apps in the same device to access Nextcloud's data bypassing
ent permission control, respectively) that allow malicious apps in the same device to access Nextcloud's data bypassing the permission control system. Users should upgrade to version 3.18.1 to receive a patch. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/android/security/advisories/GHSA-vjp2-f63v-w479 - https://github.com/nextcloud/android/commit/627caba60e69e223b0fc89c4cb18eaa76a95db95 - https://hackerone.com/reports/1358597
CVE ID: CVE-2021-43864 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43865 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43866 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43867 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43868 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43869 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43870 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43871 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43872 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43873 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43874 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-43875 State: PUBLISHED Published: 2021-12-15T14:15:30 Last Updated: 2024-08-04T04:10:16.342Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 Problem Types: Remote Code Execution Description: Microsoft Office Graphics Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43875
CVE ID: CVE-2021-43876 State: PUBLISHED Published: 2021-12-29T22:48:34 Last Updated: 2024-08-04T04:10:16.281Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Server 2019 Problem Types: Elevation of Privilege Description: Microsoft SharePoint Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43876
CVE ID: CVE-2021-43877 State: PUBLISHED Published: 2021-12-15T14:15:31 Last Updated: 2024-08-04T04:10:17.113Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8), Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.0, ASP.NET Core 3.1, ASP.NET Core 5.0, ASP.NET Core 6.0, Microsoft Visual Studio 2022 version 17.1 Problem Types: Elevation of Privilege Description: ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability Additional Analyst
evation of Privilege Description: ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43877
CVE ID: CVE-2021-43880 State: PUBLISHED Published: 2021-12-15T14:15:32 Last Updated: 2024-08-04T04:10:17.130Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 21H2 Problem Types: Elevation of Privilege Description: Windows Mobile Device Management Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43880
CVE ID: CVE-2021-43882 State: PUBLISHED Published: 2021-12-15T14:15:32 Last Updated: 2024-08-04T04:10:17.098Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender for IoT Problem Types: Remote Code Execution Description: Microsoft Defender for IoT Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43882 - https://www.zerodayinitiative.com/advisories/ZDI-21-1553/
CVE ID: CVE-2021-43883 State: PUBLISHED Published: 2021-12-15T14:15:33 Last Updated: 2024-08-04T04:10:16.440Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack
10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Installer Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
staller Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43883
CVE ID: CVE-2021-43888 State: PUBLISHED Published: 2021-12-15T14:15:34 Last Updated: 2024-08-04T04:10:17.170Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender for IoT Problem Types: Information Disclosure Description: Microsoft Defender for IoT Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43888
CVE ID: CVE-2021-43889 State: PUBLISHED Published: 2021-12-15T14:15:35 Last Updated: 2024-08-04T04:10:16.568Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender for IoT Problem Types: Remote Code Execution Description: Microsoft Defender for IoT Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43889
CVE ID: CVE-2021-43890 State: PUBLISHED Published: 2021-12-15T14:15:35.000Z Last Updated: 2025-10-21T23:25:22.309Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: App Installer Problem Types: Spoofing Description: We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Emotet/Trickbot/Bazaloader. An attacker could craft a malicious attachment to be used in phishing campaigns. The attacker would then have to convince the user to o
ld craft a malicious attachment to be used in phishing campaigns. The attacker would then have to convince the user to open the specially crafted attachment. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Please see the Security Updates table for the link to the updated app. Alternatively you can download and install the Installer using the links provided in the FAQ section. Please see the Mitigations and Workaround sections for important information about steps you can take to protect your system from this vulnerability. December 27 2023 Update: In recent months, Microsoft Threat Inte
an take to protect your system from this vulnerability. December 27 2023 Update: In recent months, Microsoft Threat Intelligence has seen an increase in activity from threat actors leveraging social engineering and phishing techniques to target Windows OS users and utilizing the ms-appinstaller URI scheme. To address this increase in activity, we have updated the App Installer to disable the ms-appinstaller protocol by default and recommend other potential mitigations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43890 - https://www.bleepingcomputer.com/news/microsoft/micr
src.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43890 - https://www.bleepingcomputer.com/news/microsoft/microsoft-disables-msix-protocol-handler-abused-in-malware-attacks/ - https://thehackernews.com/2023/12/microsoft-disables-msix-app-installer.html - https://www.microsoft.com/en-us/security/blog/2023/12/28/financially-motivated-threat-actors-misusing-app-installer/ - https://github.com/ChrisTitusTech/winutil/pull/26
CVE ID: CVE-2021-43891 State: PUBLISHED Published: 2021-12-15T14:15:36 Last Updated: 2024-08-04T04:10:17.028Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Remote Code Execution Description: Visual Studio Code Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43891
CVE ID: CVE-2021-43892 State: PUBLISHED Published: 2021-12-15T14:15:37 Last Updated: 2024-08-04T04:10:17.148Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft BizTalk ESB Toolkit 2.2, Microsoft BizTalk ESB Toolkit 2.4, Microsoft BizTalk ESB Toolkit 2.3 Problem Types: Spoofing Description: Microsoft BizTalk ESB Toolkit Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43892
CVE ID: CVE-2021-43893 State: PUBLISHED Published: 2021-12-15T14:15:37 Last Updated: 2024-08-04T04:10:16.295Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack
10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: Refer
crypting File System (EFS) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43893 - http://packetstormsecurity.com/files/165560/Microsoft-Windows-EFSRPC-Arbitrary-File-Upload-Privilege-Escalation.html
CVE ID: CVE-2021-43896 State: PUBLISHED Published: 2021-12-15T14:15:38 Last Updated: 2024-08-04T04:10:17.045Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Microsoft Products: CBL Mariner 2.0 x64, CBL Mariner 2.0 ARM, CBL Mariner 1.0 x64, CBL Mariner 1.0 ARM, PowerShell 7.2 Problem Types: Spoofing Description: Microsoft PowerShell Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43896
CVE ID: CVE-2021-43899 State: PUBLISHED Published: 2021-12-15T14:15:39 Last Updated: 2024-08-04T04:10:17.252Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 4K Wireless Display Adapter Problem Types: Remote Code Execution Description: Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43899
CVE ID: CVE-2021-43905 State: PUBLISHED Published: 2021-12-15T14:15:40 Last Updated: 2024-08-04T04:10:16.923Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Office app Problem Types: Remote Code Execution Description: Microsoft Office app Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43905
CVE ID: CVE-2021-43907 State: PUBLISHED Published: 2021-12-15T14:15:41 Last Updated: 2024-08-04T04:10:17.165Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code WSL Extension Problem Types: Remote Code Execution Description: Visual Studio Code WSL Extension Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43907
CVE ID: CVE-2021-43908 State: PUBLISHED Published: 2021-12-15T14:15:41 Last Updated: 2024-08-04T04:10:17.109Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Spoofing Description: Visual Studio Code Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43908