Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27031 State: PUBLISHED Published: 2021-04-19T15:10:45 Last Updated: 2024-08-03T20:40:47.069Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Use-After-Free Remote Code Execution Vulnerability Description: A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001 - https://www.zerodayinitiative.com/advisories/ZDI-21-468/ - https://
sk.com/trust/security-advisories/adsk-sa-2021-0001 - https://www.zerodayinitiative.com/advisories/ZDI-21-468/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1069/
CVE ID: CVE-2021-27032 State: PUBLISHED Published: 2021-05-28T11:30:53 Last Updated: 2024-08-03T20:40:47.243Z Vendors: n/a Products: Autodesk Licensing Installer Problem Types: Privilege Escalation Description: Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service. Additional Analyst Notes: - CVE Program Container: References: - https:/
onfiguration and take ownership of the service. Additional Analyst Notes: - CVE Program Container: References: - https://knowledge.autodesk.com/search-result/caas/downloads/content/autodesk-licensing-service-download.html - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0002%3B - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0002
CVE ID: CVE-2021-27033 State: PUBLISHED Published: 2021-07-09T14:12:16 Last Updated: 2024-08-03T20:40:47.208Z Vendors: n/a Products: Autodesk Design Review Problem Types: Double Free Description: A Double Free vulnerability allows remote attackers to execute arbitrary code on PDF files within affected installations of Autodesk Design Review 2018, 2017, 2013, 2012, 2011. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2021-27034 State: PUBLISHED Published: 2021-07-09T14:16:05 Last Updated: 2024-08-03T20:40:47.208Z Vendors: n/a Products: Autodesk Design Review Problem Types: Heap Overflow Vulnerability Description: A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003 - https://www.zerodayinitiative.com/advisories/ZDI-21-1127/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1132/ - https://www.zerodayinitiative
.com/advisories/ZDI-21-1127/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1132/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1125/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1126/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1128/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1129/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1130/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1131/
CVE ID: CVE-2021-27035 State: PUBLISHED Published: 2021-07-09T14:16:34 Last Updated: 2024-08-03T20:40:47.068Z Vendors: n/a Products: Autodesk Design Review Problem Types: Out-of-bounds Read Description: A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA or DWF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2021-27036 State: PUBLISHED Published: 2021-07-09T14:17:01 Last Updated: 2024-08-03T20:40:47.010Z Vendors: n/a Products: Autodesk Design Review Problem Types: Out-of-bounds Write Description: A maliciously crafted PCX, PICT, RCL, TIF, BMP, PSD or TIFF file can be used to write beyond the allocated buffer while parsing PCX, PDF, PICT, RCL, BMP, PSD or TIFF files. This vulnerability can be exploited to execute arbitrary code Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2021-27037 State: PUBLISHED Published: 2021-07-09T14:17:32 Last Updated: 2024-08-03T20:40:47.379Z Vendors: n/a Products: Autodesk Design Review Problem Types: Use-After-Free Vulnerability Description: A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2021-27038 State: PUBLISHED Published: 2021-07-09T14:17:59 Last Updated: 2024-08-03T20:40:47.303Z Vendors: n/a Products: Autodesk Design Review Problem Types: Type Confusion RCE Vulnerability Description: A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a maliciously crafted PDF file. A malicious actor can leverage this to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2021-27039 State: PUBLISHED Published: 2021-07-09T14:18:21 Last Updated: 2024-08-03T20:40:47.228Z Vendors: n/a Products: Autodesk Design Review Problem Types: Uninitialized Variable Vulnerability Description: A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2021-27040 State: PUBLISHED Published: 2021-06-25T12:41:07 Last Updated: 2024-08-03T20:40:46.943Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Out-of-bound Read Vulnerability Description: A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0004 - https://www.zerodayinitiative.com/ad
eferences: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0004 - https://www.zerodayinitiative.com/advisories/ZDI-21-1238/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1236/ - https://www.zerodayinitiative.com/advisories/ZDI-22-378/ - https://www.zerodayinitiative.com/advisories/ZDI-22-473/
CVE ID: CVE-2021-27041 State: PUBLISHED Published: 2021-06-25T12:41:13 Last Updated: 2024-08-03T20:40:47.113Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Out-of-bound Write Vulnerability Description: A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007
CVE ID: CVE-2021-27042 State: PUBLISHED Published: 2021-06-25T12:41:19 Last Updated: 2024-08-03T20:40:47.367Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Memory Corruption Vulnerability Description: A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code. Additional Analyst Notes: - CVE Program Conta
on. An attacker can leverage this vulnerability to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007
CVE ID: CVE-2021-27043 State: PUBLISHED Published: 2021-06-25T12:41:26 Last Updated: 2024-08-03T20:40:47.163Z Vendors: n/a Products: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Write-what-where Condition Vulnerabiliity Description: An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.a
enable full page heap in the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007
CVE ID: CVE-2021-27044 State: PUBLISHED Published: 2021-09-15T14:11:00 Last Updated: 2024-08-03T20:40:46.985Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Out-Of-Bounds Read Vulnerability Description: A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001
CVE ID: CVE-2021-27045 State: PUBLISHED Published: 2021-09-15T16:35:07 Last Updated: 2024-08-03T20:40:47.244Z Vendors: n/a Products: Autodesk Navisworks Problem Types: Out-of-bound Read Description: A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0008
CVE ID: CVE-2021-27046 State: PUBLISHED Published: 2021-09-15T16:35:15 Last Updated: 2024-08-03T20:40:47.017Z Vendors: n/a Products: Autodesk Navisworks Problem Types: Memory Corruption - Generic Description: A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously crafted DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0008
CVE ID: CVE-2021-27047 State: PUBLISHED Published: 2021-03-11T15:44:25 Last Updated: 2024-08-03T20:40:47.148Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27047
CVE ID: CVE-2021-27048 State: PUBLISHED Published: 2021-03-11T15:44:44 Last Updated: 2024-08-03T20:40:47.047Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27048
CVE ID: CVE-2021-27049 State: PUBLISHED Published: 2021-03-11T15:45:06 Last Updated: 2024-08-03T20:40:47.055Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27049
CVE ID: CVE-2021-27050 State: PUBLISHED Published: 2021-03-11T15:45:13 Last Updated: 2024-10-01T15:55:14.579Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27050
CVE ID: CVE-2021-27051 State: PUBLISHED Published: 2021-03-11T15:45:20 Last Updated: 2024-08-03T20:40:47.327Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27051
CVE ID: CVE-2021-27052 State: PUBLISHED Published: 2021-03-11T15:46:00 Last Updated: 2024-08-03T20:40:47.182Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019 Problem Types: Information Disclosure Description: Microsoft SharePoint Server Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27052
CVE ID: CVE-2021-27053 State: PUBLISHED Published: 2021-03-11T15:46:11 Last Updated: 2024-08-03T20:40:47.298Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE
yst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27053 - https://www.zerodayinitiative.com/advisories/ZDI-21-332/
CVE ID: CVE-2021-27054 State: PUBLISHED Published: 2021-03-11T15:46:24 Last Updated: 2024-08-03T20:40:47.299Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Addit
rvice Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27054 - https://www.zerodayinitiative.com/advisories/ZDI-21-507/
CVE ID: CVE-2021-27055 State: PUBLISHED Published: 2021-03-11T15:48:18 Last Updated: 2024-08-03T20:40:47.084Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visio 2013 Service Pack 1, Microsoft Visio 2013 Service Pack 1 , Microsoft Visio 2016, Microsoft Visio 2010 Service Pack 2, Microsoft Office 2019, Microsoft 365 Apps for Enterprise Problem Types: Security Feature Bypass Description: Microsoft Visio Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27055
CVE ID: CVE-2021-27056 State: PUBLISHED Published: 2021-03-11T15:48:19 Last Updated: 2024-11-19T16:08:51.933Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint 2010 Service Pack 2 Problem Types: Remote Code Execution Description: Microsoft PowerPoint Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27056 - https://www.zerodayinitiati
ences: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27056 - https://www.zerodayinitiative.com/advisories/ZDI-21-333/
CVE ID: CVE-2021-27057 State: PUBLISHED Published: 2021-03-11T15:48:21 Last Updated: 2024-08-03T20:40:47.119Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2016, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office Web Apps 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Office Remote Code Execution Vulnerability Additional
ack 1 Problem Types: Remote Code Execution Description: Microsoft Office Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27057 - https://www.zerodayinitiative.com/advisories/ZDI-21-334/
CVE ID: CVE-2021-27058 State: PUBLISHED Published: 2021-03-11T15:48:22 Last Updated: 2024-08-03T20:40:47.240Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise Problem Types: Remote Code Execution Description: Microsoft Office ClickToRun Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27058
CVE ID: CVE-2021-27059 State: PUBLISHED Published: 2021-03-11T15:49:00.000Z Last Updated: 2025-10-21T23:25:51.897Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2016, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Office Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059
CVE ID: CVE-2021-27060 State: PUBLISHED Published: 2021-03-11T15:49:15 Last Updated: 2024-08-03T20:40:46.967Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Remote Code Execution Description: Visual Studio Code Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27060
CVE ID: CVE-2021-27061 State: PUBLISHED Published: 2021-03-11T15:49:16 Last Updated: 2024-10-01T15:55:00.460Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27061
CVE ID: CVE-2021-27062 State: PUBLISHED Published: 2021-03-11T15:49:17 Last Updated: 2024-08-03T20:40:47.221Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27062
CVE ID: CVE-2021-27063 State: PUBLISHED Published: 2021-03-11T15:49:18 Last Updated: 2024-10-01T15:54:54.518Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server, version 1909 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Cor
ows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows DNS Server Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27063
CVE ID: CVE-2021-27064 State: PUBLISHED Published: 2021-04-13T19:32:36.000Z Last Updated: 2025-08-15T14:51:44.636Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Problem Types: Elevation of Privilege Description: Visual Studio Installer Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27064