Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ext of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb21-09.html
CVE ID: CVE-2021-21087 State: PUBLISHED Published: 2021-04-15T13:54:29.883Z Last Updated: 2025-04-23T19:41:40.132Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-79 Description: Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction. Additional Analyst Notes: - CVE Program Container:
current user. Exploitation of this issue requires user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html
CVE ID: CVE-2021-21088 State: PUBLISHED Published: 2023-09-06T13:08:12.094Z Last Updated: 2024-08-03T18:01:13.235Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CV
tion of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb21-09.html
CVE ID: CVE-2021-21089 State: PUBLISHED Published: 2021-09-30T14:01:30.466583Z Last Updated: 2024-09-16T19:46:37.647Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-125 Description: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally escalate privileges in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: -
CVE ID: CVE-2021-21090 State: PUBLISHED Published: 2021-06-28T13:45:17.800Z Last Updated: 2025-04-23T19:41:00.909Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-22 Description: Adobe InCopy version 16.0 (and earlier) is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help
a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb21-25.html
CVE ID: CVE-2021-21091 State: PUBLISHED Published: 2021-04-15T13:53:23.122Z Last Updated: 2025-04-23T19:41:53.631Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP
r interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-23.html - https://www.zerodayinitiative.com/advisories/ZDI-21-413/
CVE ID: CVE-2021-21092 State: PUBLISHED Published: 2021-04-15T13:53:31.631Z Last Updated: 2025-04-23T19:41:47.185Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA
user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-23.html - https://www.zerodayinitiative.com/advisories/ZDI-21-415/
CVE ID: CVE-2021-21093 State: PUBLISHED Published: 2021-04-15T13:51:50.783Z Last Updated: 2025-04-23T19:42:11.936Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-788 Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA
user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-23.html - https://www.zerodayinitiative.com/advisories/ZDI-21-414/
CVE ID: CVE-2021-21094 State: PUBLISHED Published: 2021-04-15T13:49:09.313Z Last Updated: 2025-04-23T19:42:29.821Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - C
res user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-23.html - https://www.zerodayinitiative.com/advisories/ZDI-21-416/
CVE ID: CVE-2021-21095 State: PUBLISHED Published: 2021-04-15T13:52:06.992Z Last Updated: 2025-04-23T19:42:05.896Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
nteraction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-23.html - https://www.zerodayinitiative.com/advisories/ZDI-21-418/
CVE ID: CVE-2021-21096 State: PUBLISHED Published: 2021-04-15T13:49:29.079Z Last Updated: 2025-04-23T19:42:23.651Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-285 Description: Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
s not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-23.html
CVE ID: CVE-2021-21098 State: PUBLISHED Published: 2021-06-28T13:42:06.752Z Last Updated: 2025-04-23T19:41:18.888Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-787 Description: Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb21-22.html
CVE ID: CVE-2021-21099 State: PUBLISHED Published: 2021-06-28T13:42:22.609Z Last Updated: 2025-04-23T19:41:09.028Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-787 Description: Adobe InDesign version 16.0 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
CVE ID: CVE-2021-21100 State: PUBLISHED Published: 2021-04-15T13:51:28.016Z Last Updated: 2025-04-23T19:42:18.061Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Digital Editions Problem Types: CWE-379 Description: Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
ction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html
CVE ID: CVE-2021-21101 State: PUBLISHED Published: 2021-06-28T13:42:00.768346Z Last Updated: 2024-09-17T01:01:13.830Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-787 Description: Adobe Illustrator version 25.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https
tion in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE ID: CVE-2021-21102 State: PUBLISHED Published: 2021-06-28T13:45:23.120Z Last Updated: 2025-04-23T19:40:52.627Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-22 Description: Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
at a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE ID: CVE-2021-21103 State: PUBLISHED Published: 2021-09-08T16:18:53.356296Z Last Updated: 2024-09-17T00:45:40.968Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Illustrator Problem Types: CWE-788 Description: Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - h
eraction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE ID: CVE-2021-21104 State: PUBLISHED Published: 2021-09-08T16:19:06.979690Z Last Updated: 2024-09-16T23:11:37.758Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-788 Description: Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe
victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE ID: CVE-2021-21105 State: PUBLISHED Published: 2021-09-08T16:19:16.663694Z Last Updated: 2024-09-16T16:28:03.763Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-788 Description: Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve remote code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://hel
n that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/illustrator/apsb21-24.html
CVE ID: CVE-2021-21106 State: PUBLISHED Published: 2021-01-08T17:56:26 Last Updated: 2024-08-03T18:01:13.875Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1148749 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/l
y.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
CVE ID: CVE-2021-21107 State: PUBLISHED Published: 2021-01-08T17:56:27 Last Updated: 2024-08-03T18:01:14.122Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1153595 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.
ttps://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
CVE ID: CVE-2021-21108 State: PUBLISHED Published: 2021-01-08T17:56:27 Last Updated: 2024-08-03T18:01:14.034Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1155426 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list
entoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
CVE ID: CVE-2021-21109 State: PUBLISHED Published: 2021-01-08T17:56:27 Last Updated: 2024-08-03T18:01:13.939Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1152334 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/l
CVE ID: CVE-2021-21110 State: PUBLISHED Published: 2021-01-08T17:56:27 Last Updated: 2024-08-03T18:01:14.099Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1152451 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
//www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
CVE ID: CVE-2021-21111 State: PUBLISHED Published: 2021-01-08T17:56:27 Last Updated: 2024-08-03T18:01:13.961Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1149125 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832
- https://crbug.com/1149125 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
CVE ID: CVE-2021-21112 State: PUBLISHED Published: 2021-01-08T17:56:27 Last Updated: 2024-08-03T18:01:13.856Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1151298 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
ian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
CVE ID: CVE-2021-21113 State: PUBLISHED Published: 2021-01-08T17:56:27 Last Updated: 2024-08-03T18:01:14.009Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html - https://crbug.com/1155178 - https://security.gentoo.org/glsa/202101-05 - https://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedor
s://www.debian.org/security/2021/dsa-4832 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/