Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-24032 State: PUBLISHED Published: 2021-03-04T20:15:21 Last Updated: 2024-08-03T19:21:17.115Z Vendors: Facebook Products: Zstandard Problem Types: CWE-277 Description: Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/zstd/issues/2491 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982519 - https://www.facebook.com/security
facebook/zstd/issues/2491 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982519 - https://www.facebook.com/security/advisories/cve-2021-24032
CVE ID: CVE-2021-24033 State: PUBLISHED Published: 2021-03-09T00:25:13 Last Updated: 2024-08-03T19:21:17.286Z Vendors: Facebook Products: react-dev-utils Problem Types: CWE-78 Description: react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. Only when this function is manually invoked with user-provided values (ie: by custom code) is there the potential for command injection. If you're consuming it from react-scripts then this issue does not affect you. Additional Analyst Notes: - CVE Progr
on. If you're consuming it from react-scripts then this issue does not affect you. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/create-react-app/pull/10644 - https://www.facebook.com/security/advisories/cve-2021-24033
CVE ID: CVE-2021-24035 State: PUBLISHED Published: 2021-06-11T03:35:10 Last Updated: 2024-08-03T19:21:17.185Z Vendors: Facebook Products: WhatsApp Business for Android, WhatsApp for Android Problem Types: CWE-23 Description: A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2021/
CVE ID: CVE-2021-24036 State: PUBLISHED Published: 2021-07-23T00:30:16 Last Updated: 2024-08-03T19:21:17.359Z Vendors: Facebook Products: folly, HHVM Problem Types: CWE-122 Description: Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1. Additional Analyst Notes: - CVE Program Container: References: - ht
4.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1. Additional Analyst Notes: - CVE Program Container: References: - https://hhvm.com/blog/2021/07/20/security-update.html - https://github.com/facebook/folly/commit/4f304af1411e68851bdd00ef6140e9de4616f7d3 - https://www.facebook.com/security/advisories/cve-2021-24036
CVE ID: CVE-2021-24037 State: PUBLISHED Published: 2021-06-15T22:00:11 Last Updated: 2024-08-03T19:21:17.277Z Vendors: Facebook Products: Hermes Problem Types: CWE-416 Description: A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebook/hermes/commit/d86e185e485b6330216dee8e854455c694e3a36e -
VE Program Container: References: - https://github.com/facebook/hermes/commit/d86e185e485b6330216dee8e854455c694e3a36e - https://www.facebook.com/security/advisories/CVE-2021-24037
CVE ID: CVE-2021-24038 State: PUBLISHED Published: 2021-08-18T23:35:09 Last Updated: 2024-08-03T19:21:17.297Z Vendors: Facebook Products: Oculus Desktop Problem Types: CWE-269 Description: Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2021-24038
CVE ID: CVE-2021-24040 State: PUBLISHED Published: 2021-09-10T22:10:10 Last Updated: 2024-08-03T19:21:17.219Z Vendors: Facebook Products: ParlAI Problem Types: CWE-502 Description: Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/facebookresearch/ParlAI/releases/tag/v1.1.0 - https://github.com/facebookresearch/ParlAI/security/advisories/GHSA-m87f-9fvv-2mgg - http://packetstormsecurity.com/files/164136/Facebook-ParlA
bookresearch/ParlAI/security/advisories/GHSA-m87f-9fvv-2mgg - http://packetstormsecurity.com/files/164136/Facebook-ParlAI-1.0.0-Code-Execution-Deserialization.html
CVE ID: CVE-2021-24041 State: PUBLISHED Published: 2021-12-07T19:10:09 Last Updated: 2024-08-03T19:21:17.331Z Vendors: Facebook Products: WhatsApp Business for Android, WhatsApp for Android Problem Types: CWE-122 Description: A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2021/
CVE ID: CVE-2021-24042 State: PUBLISHED Published: 2022-01-04T18:55:08.000Z Last Updated: 2025-05-22T18:36:53.143Z Vendors: Facebook Products: WhatsApp Desktop, WhatsApp for KaiOS, WhatsApp Business for iOS, WhatsApp for iOS, WhatsApp Business for Android, WhatsApp for Android Problem Types: CWE-122 Description: The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor. Additional Analyst Notes: - CV
ould have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whatsapp.com/security/advisories/2021/
CVE ID: CVE-2021-24043 State: PUBLISHED Published: 2022-02-02T11:59:31 Last Updated: 2024-08-03T19:21:17.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7, and WhatsApp Desktop v2.2145.0 could have allowed an out-of-bounds heap read if a user sent a malformed RTCP packet during an established call. Additional Analyst Notes: - CVE Program Container: References: - https://www.whatsapp.com/security/advisories/2021/
CVE ID: CVE-2021-24044 State: PUBLISHED Published: 2022-01-15T00:35:08 Last Updated: 2024-08-03T19:21:17.267Z Vendors: Facebook Products: Hermes Problem Types: CWE-843 Description: By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error, with a low chance of RCE. This issue affects Hermes versions prior to v0.10.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2021-24044
CVE ID: CVE-2021-24045 State: PUBLISHED Published: 2021-12-13T20:30:11 Last Updated: 2024-08-03T19:21:17.287Z Vendors: Facebook Products: Hermes Problem Types: CWE-843 Description: A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2021-24045 - https://github.com/facebook/hermes/commit/55e1b2343f4deb1a1b5726cfe1e23b2068217ff2
CVE ID: CVE-2021-24046 State: PUBLISHED Published: 2022-01-14T18:10:10 Last Updated: 2024-08-03T19:21:17.360Z Vendors: Meta Platforms, Inc Products: Ray-Ban® Stories Smart Glasses Problem Types: CWE-471 Description: A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.facebook.com/security/advisories/cve-2021-24046
CVE ID: CVE-2021-24066 State: PUBLISHED Published: 2021-02-25T23:01:33 Last Updated: 2024-08-03T19:21:17.281Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2010 Service Pack 2, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft SharePoint Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24066
CVE ID: CVE-2021-24067 State: PUBLISHED Published: 2021-02-25T23:01:33 Last Updated: 2024-08-03T19:21:17.216Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office Web Apps Server 2013 Service Pack 1, Office Online Server, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.ms
l Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24067
CVE ID: CVE-2021-24068 State: PUBLISHED Published: 2021-02-25T23:01:34 Last Updated: 2024-08-03T19:21:17.242Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24068
CVE ID: CVE-2021-24069 State: PUBLISHED Published: 2021-02-25T23:01:35 Last Updated: 2024-08-03T19:21:17.277Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office Web Apps Server 2013 Service Pack 1, Office Online Server, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-
ility Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24069
CVE ID: CVE-2021-24070 State: PUBLISHED Published: 2021-02-25T23:01:35 Last Updated: 2024-08-03T19:21:17.273Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office Web Apps Server 2013 Service Pack 1, Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-2407
- CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24070
CVE ID: CVE-2021-24071 State: PUBLISHED Published: 2021-02-25T23:01:36 Last Updated: 2024-08-03T19:21:18.256Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2010 Service Pack 2, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Information Disclosure Description: Microsoft SharePoint Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24071
CVE ID: CVE-2021-24072 State: PUBLISHED Published: 2021-02-25T23:01:37 Last Updated: 2024-08-03T19:21:17.788Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24072
CVE ID: CVE-2021-24073 State: PUBLISHED Published: 2021-02-25T23:01:37 Last Updated: 2024-08-03T19:21:17.267Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Skype for Business Server 2015 CU 8, Microsoft Lync Server 2013 Problem Types: Spoofing Description: Skype for Business and Lync Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24073
CVE ID: CVE-2021-24074 State: PUBLISHED Published: 2021-02-25T23:01:38 Last Updated: 2024-08-03T19:21:17.354Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Se
Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Remote Code Execution Description: Windows TCP/IP Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.micro
Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24074
CVE ID: CVE-2021-24075 State: PUBLISHED Published: 2021-02-25T23:01:38 Last Updated: 2024-08-03T19:21:18.246Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 2004, Windows Server version 2004 Problem Types: Denial of Service Description: Microsoft Windows VMSwitch Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24075
CVE ID: CVE-2021-24076 State: PUBLISHED Published: 2021-02-25T23:01:39 Last Updated: 2024-08-03T19:21:18.286Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation
Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server version 20H2, Windows 10 Version 2004, Windows Server version 2004 Problem Types: Information Disclosure Description: Microsoft Windows VMSwitch Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24076
CVE ID: CVE-2021-24077 State: PUBLISHED Published: 2021-02-25T23:01:40 Last Updated: 2024-08-03T19:21:17.803Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows
1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Fax Service Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.
emote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24077
CVE ID: CVE-2021-24078 State: PUBLISHED Published: 2021-02-25T23:01:40 Last Updated: 2024-08-03T19:21:18.244Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server, version 1909 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server
Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows DNS Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24078
CVE ID: CVE-2021-24079 State: PUBLISHED Published: 2021-02-25T23:01:41 Last Updated: 2024-08-03T19:21:18.041Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Serv
607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Windows Backup Engine Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24079
CVE ID: CVE-2021-24080 State: PUBLISHED Published: 2021-02-25T23:01:42 Last Updated: 2024-10-01T15:55:47.664Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8
607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows Trust Verification API Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
API Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24080