Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
he OS/kernel by loading a malicious TA. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001
CVE ID: CVE-2021-26393 State: PUBLISHED Published: 2022-11-09T20:44:25.517806Z Last Updated: 2024-09-16T21:58:26.137Z Vendors: AMD Products: AMD Radeon RX 5000 Series & PRO W5000 Series, AMD Radeon RX 6000 Series & PRO W6000 Series, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V2000 Description: Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality. Additional Analyst Notes: - CVE Program
ess memory with attacker controlled data resulting in a loss of confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001
CVE ID: CVE-2021-26396 State: PUBLISHED Published: 2023-01-10T20:56:39.130Z Last Updated: 2025-04-09T14:54:52.802Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26397 State: PUBLISHED Published: 2023-05-09T18:36:19.135Z Last Updated: 2025-01-28T16:01:49.226Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Description: Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-26398 State: PUBLISHED Published: 2023-01-10T20:56:40.452Z Last Updated: 2025-04-09T14:38:06.009Z Vendors: AMD Products: 1st Gen EPYC , 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26399 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-26400 State: PUBLISHED Published: 2022-05-11T16:36:21.153693Z Last Updated: 2024-09-17T04:05:04.063Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1035
CVE ID: CVE-2021-26401 State: PUBLISHED Published: 2022-03-11T17:54:34.241477Z Last Updated: 2024-09-17T03:08:13.328Z Vendors: AMD Products: AMD Processors Problem Types: NA Description: LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1036 - http://www.openwall.com/lists/oss-security/2022/03/18/2
CVE ID: CVE-2021-26402 State: PUBLISHED Published: 2023-01-10T20:56:41.784Z Last Updated: 2025-04-08T20:27:13.237Z Vendors: AMD Products: 2nd Gen EPYC, 3rd Gen EPYC Problem Types: n/a Description: Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26403 State: PUBLISHED Published: 2023-01-10T20:56:43.160Z Last Updated: 2025-04-08T20:24:38.162Z Vendors: AMD, AMD Products: 1st Gen EPYC, 2nd Gen EPYC Problem Types: n/a Description: Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26404 State: PUBLISHED Published: 2023-01-10T20:56:44.456Z Last Updated: 2025-04-08T20:22:33.575Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26405 State: REJECTED Published: N/A Last Updated: 2023-01-17T00:00:00 Description: No description available.
CVE ID: CVE-2021-26406 State: PUBLISHED Published: 2023-05-09T18:59:29.119Z Last Updated: 2025-01-28T15:44:16.511Z Vendors: AMD Products: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4, Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”, Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4, 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Serie
on™ Graphics “Dali”/”Dali” ULP, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5, Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors Description: Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-secur
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001 - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
CVE ID: CVE-2021-26407 State: PUBLISHED Published: 2023-01-10T20:56:45.757Z Last Updated: 2025-04-08T20:19:44.675Z Vendors: AMD Products: 2nd Gen EPYC Problem Types: n/a Description: A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26408 State: PUBLISHED Published: 2022-05-10T18:22:50.329992Z Last Updated: 2024-09-16T21:04:07.585Z Vendors: AMD Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™ Problem Types: tbd Description: Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE ID: CVE-2021-26409 State: PUBLISHED Published: 2023-01-10T20:56:47.043Z Last Updated: 2025-04-09T14:52:43.998Z Vendors: AMD Products: 3rd Gen EPYC Problem Types: n/a Description: Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE ID: CVE-2021-26411 State: PUBLISHED Published: 2021-03-11T15:07:28.000Z Last Updated: 2025-10-21T23:25:52.201Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C) Vendors: Microsoft Products: Internet Explorer 9, Internet Explorer 11, Microsoft Edge (EdgeHTML-based) Problem Types: Remote Code Execution Description: Internet Explorer Memory Corruption Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411
CVE ID: CVE-2021-26412 State: PUBLISHED Published: 2021-03-02T23:55:24 Last Updated: 2024-11-19T15:44:00.903Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
ecution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26412
CVE ID: CVE-2021-26413 State: PUBLISHED Published: 2021-04-13T19:32:33 Last Updated: 2024-08-03T20:26:25.342Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8
607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Spoofing Description: Windows Installer Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-g
lity Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26413
CVE ID: CVE-2021-26414 State: PUBLISHED Published: 2021-06-08T22:46:11 Last Updated: 2024-08-03T20:26:25.422Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service P
on), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Security Feature Bypass Description: Windows DCOM Server Security Feature Bypass Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26414 - http://packetstor
ner: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26414 - http://packetstormsecurity.com/files/163206/Windows-Kerberos-AppContainer-Enterprise-Authentication-Capability-Bypass.html
CVE ID: CVE-2021-26415 State: PUBLISHED Published: 2021-04-13T19:32:34 Last Updated: 2024-08-03T20:26:25.176Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1
7, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Installer Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.micr
ion of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26415 - https://www.zerodayinitiative.com/advisories/ZDI-21-409/
CVE ID: CVE-2021-26416 State: PUBLISHED Published: 2021-04-13T19:32:34 Last Updated: 2024-08-03T20:26:25.424Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows Server version 20H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Denial of Service Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CV
lem Types: Denial of Service Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26416
CVE ID: CVE-2021-26417 State: PUBLISHED Published: 2021-04-13T19:32:35 Last Updated: 2024-11-19T16:25:41.638Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Information Disclosure Description: Windows Overlay Filter Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
er Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26417
CVE ID: CVE-2021-26418 State: PUBLISHED Published: 2021-05-11T19:11:10.000Z Last Updated: 2025-02-28T20:57:40.798Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26418
CVE ID: CVE-2021-26419 State: PUBLISHED Published: 2021-05-11T19:11:11 Last Updated: 2024-08-03T20:26:25.535Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Internet Explorer 11, Internet Explorer 9 Problem Types: Remote Code Execution Description: Scripting Engine Memory Corruption Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26419 - http://packetstormsecurity.com/files/162570/Internet-Explorer-jscript9.dll-Memory-Corruption.html
CVE ID: CVE-2021-26420 State: PUBLISHED Published: 2021-06-08T22:46:12 Last Updated: 2024-08-03T20:26:25.515Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26420 - https://www.zerodayinitiative.com/advisories/ZDI-21-755/
CVE ID: CVE-2021-26421 State: PUBLISHED Published: 2021-05-11T19:11:12 Last Updated: 2024-08-03T20:26:25.289Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Skype for Business Server 2015 CU11, Microsoft Lync Server 2013 CU10 Problem Types: Spoofing Description: Skype for Business and Lync Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26421
CVE ID: CVE-2021-26422 State: PUBLISHED Published: 2021-05-11T19:11:13 Last Updated: 2024-08-03T20:26:25.115Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Lync Server 2013 CU10, Skype for Business Server 2019 CU5, Skype for Business Server 2015 CU11 Problem Types: Security Feature Bypass Description: Skype for Business and Lync Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26422
CVE ID: CVE-2021-26423 State: PUBLISHED Published: 2021-08-12T18:11:31 Last Updated: 2024-08-03T20:26:25.161Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8), Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9), Visual Studio 2019 for Mac version 8.10, .NET Core 2.1, .NET Core 3.1, .NET 5.0, PowerShell Core 7.1, PowerShell Core 7.0 Problem Types: Denial o
c version 8.10, .NET Core 2.1, .NET Core 3.1, .NET 5.0, PowerShell Core 7.1, PowerShell Core 7.0 Problem Types: Denial of Service Description: .NET Core and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26423
CVE ID: CVE-2021-26424 State: PUBLISHED Published: 2021-08-12T18:11:32 Last Updated: 2024-08-03T20:26:25.312Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server
ore installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows TCP/IP Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26424
CVE ID: CVE-2021-26425 State: PUBLISHED Published: 2021-08-12T18:11:34 Last Updated: 2024-08-03T20:26:25.077Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008
installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Event Tracing Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-2
es: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26425