deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-28553
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28555
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28557
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28558
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by an Heap-based buffer overflow vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28559
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get access to restricted data stored within global variables and objects.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-359
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28560
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28561
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28564
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-28565
Published: 2021-09-02
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]0 (and earlier) and 2[PII_REDACTED]4 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb21-29.html; https://helpx.adobe.com/security/products/acrobat/apsb21-29.html
CVE: CVE-2021-35993
Published: 2021-09-02
Description: Adobe After Effects version 18.2.1 (and earlier) is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-54.html; https://helpx.adobe.com/security/products/after_effects/apsb21-54.html
CVE: CVE-2021-35994
Published: 2021-09-02
Description: Adobe After Effects version 18.2.1 (and earlier) is affected by an out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-54.html; https://helpx.adobe.com/security/products/after_effects/apsb21-54.html
CVE: CVE-2021-35995
Published: 2021-09-02
Description: Adobe After Effects version 18.2.1 (and earlier) is affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-20, CWE-665
References: https://helpx.adobe.com/security/products/after_effects/apsb21-54.html; https://helpx.adobe.com/security/products/after_effects/apsb21-54.html
CVE: CVE-2021-35996
Published: 2021-09-02
Description: Adobe After Effects version 18.2.1 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-54.html; https://helpx.adobe.com/security/products/after_effects/apsb21-54.html
CVE: CVE-2021-36017
Published: 2021-09-02
Description: Adobe After Effects version 18.2.1 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-54.html; https://helpx.adobe.com/security/products/after_effects/apsb21-54.html
CVE: CVE-2021-36018
Published: 2021-09-02
Description: Adobe After Effects version 18.2.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-54.html; https://helpx.adobe.com/security/products/after_effects/apsb21-54.html
CVE: CVE-2021-36019
Published: 2021-09-02
Description: Adobe After Effects version 18.2.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-54.html; https://helpx.adobe.com/security/products/after_effects/apsb21-54.html
CVE: CVE-2021-38312
Published: 2021-09-02
Description: The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The `permissions_callback` used in this file only checked for the `edit_posts` capability which is granted to lower-privileged users such as contributors, allowing such users to install arbitrary plugins from the WordPress repository and edit arbitrary posts.
CVSS Score: 7.1 (HIGH)
CWE: CWE-280, CWE-863, CWE-863
References: https://www.wordfence.com/blog/2021/09/over-1-million-sites-affected-by-redux-framework-vulnerabilities/; https://www.wordfence.com/blog/2021/09/over-1-million-sites-affected-by-redux-framework-vulnerabilities/
CVE: CVE-2021-38314
Published: 2021-09-02
Description: The Gutenberg Template Library & Redux Framework plugin <= 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the `includes` function in `redux-core/class-redux-core.php` that were unique to a given site but deterministic and predictable given that they were based on an md5 hash of the site URL with a known salt value of '-redux' and an md5 hash of the previous hash with a known salt value of '-support'. These AJAX actions could be used to retrieve a list of active plugins and their versions, the site's PHP version, and an unsalted md5 hash of site’s `AUTH_KEY` concatenated with the `SECURE_AUTH_KEY`.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-760, CWE-916
References: https://www.wordfence.com/blog/2021/09/over-1-million-sites-affected-by-redux-framework-vulnerabilities/; https://www.wordfence.com/blog/2021/09/over-1-million-sites-affected-by-redux-framework-vulnerabilities/
CVE: CVE-2021-39322
Published: 2021-09-02
Description: The Easy Social Icons plugin <= 3.0.8 for WordPress echoes out the raw value of `$_SERVER['PHP_SELF']` in its main file. On certain configurations including Apache+modPHP this makes it possible to use it to perform a reflected Cross-Site Scripting attack by injecting malicious code in the request path.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpvulndb.com/vulnerabilities/5e0bf0b6-9809-426b-b1d4-1fb653083b58; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39322; https://wpvulndb.com/vulnerabilities/5e0bf0b6-9809-426b-b1d4-1fb653083b58
CVE: CVE-2020-18048
Published: 2021-09-02
Description: An issue in craigms/main.php of CraigMS 1.0 allows attackers to execute arbitrary commands via a crafted input entered into the DB Name field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://cwe.mitre.org/data/definitions/77.html; https://github.com/bertanddip/CraigMS/issues/1; https://cwe.mitre.org/data/definitions/77.html
CVE: CVE-2021-34436
Published: 2021-09-02
Description: In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extension. This extension uses lsp4xml (recently renamed to LemMinX) in order to provide language support for XML. This is installed by default.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-611, CWE-22, CWE-611
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=563174; https://bugs.eclipse.org/bugs/show_bug.cgi?id=563174
CVE: CVE-2021-26436
Published: 2021-09-02
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 6.1 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26436; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26436
CVE: CVE-2021-26439
Published: 2021-09-02
Description: Microsoft Edge for Android Information Disclosure Vulnerability
CVSS Score: 4.6 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26439; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26439
CVE: CVE-2021-36930
Published: 2021-09-02
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36930; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36930
CVE: CVE-2021-38641
Published: 2021-09-02
Description: Microsoft Edge for Android Spoofing Vulnerability
CVSS Score: 6.1 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38641; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38641
CVE: CVE-2021-38642
Published: 2021-09-02
Description: Microsoft Edge for iOS Spoofing Vulnerability
CVSS Score: 6.1 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38642; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38642
CVE: CVE-2021-40490
Published: 2021-09-03
Description: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=9e445093e523f[PII_REDACTED]c864f708fd4bd34aa; https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html; https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE: CVE-2021-40491
Published: 2021-09-03
Description: The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993476; https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=58cb043b190fd04effdaea7c9403416b436e50dd; https://lists.debian.org/debian-lts-announce/2022/11/msg00033.html
CVE: CVE-2021-40494
Published: 2021-09-03
Description: A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/AdaptiveScale/lxdui/pull/353; https://github.com/AdaptiveScale/lxdui/pull/353
CVE: CVE-2021-39191
Published: 2021-09-03
Description: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9.4, the 3rd-party init SSO functionality of mod_auth_openidc was reported to be vulnerable to an open redirect attack by supplying a crafted URL in the `target_link_uri` parameter. A patch in version 2.4.9.4 made it so that the `OIDCRedirectURLsAllowed` setting must be applied to the `target_link_uri` parameter. There are no known workarounds aside from upgrading to a patched version.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/zmartzone/mod_auth_openidc/commit/03e6bfb446f4e3f27c003d30d6a433e5dd8e2b3d; https://github.com/zmartzone/mod_auth_openidc/issues/672; https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9.4
CVE: CVE-2021-39192
Published: 2021-09-03
Description: Ghost is a Node.js content management system. An error in the implementation of the limits service between versions 4.0.0 and 4.9.4 allows all authenticated users (including contributors) to view admin-level API keys via the integrations API endpoint, leading to a privilege escalation vulnerability. This issue is patched in Ghost version 4.10.0. As a workaround, disable all non-Administrator accounts to prevent API access. It is highly recommended to regenerate all API keys after patching or applying the workaround.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-269
References: https://github.com/TryGhost/Ghost/releases/tag/v4.10.0; https://github.com/TryGhost/Ghost/security/advisories/GHSA-j5c2-hm46-wp5c; https://github.com/TryGhost/Ghost/releases/tag/v4.10.0
CVE: CVE-2021-23437
Published: 2021-09-03
Description: The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/python-pillow/Pillow/commit/9e08eb8f78fdfd2f476e1b20b7cf[PII_REDACTED]6b; https://lists.debian.org/debian-lts-announce/2024/03/msg00021.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNSG6VFXTAROGF7ACYLMAZNQV4EJ6I2C/
CVE: CVE-2021-40492
Published: 2021-09-03
Description: A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gibbonedu.org/; https://github.com/5qu1n7/CVE-2021-40492; https://gibbonedu.org/
CVE: CVE-2021-39193
Published: 2021-09-03
Description: Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in `pallet-ethereum` can cause invalid transactions to be included in the Ethereum block state in `pallet-ethereum` due to not validating the input data size. Any invalid transactions included this way have no possibility to alter the internal Ethereum or Substrate state. The transaction will appear to have be included, but is of no effect as it is rejected by the EVM engine. The impact is further limited by Substrate extrinsic size constraints. A patch is available in commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26. There are no workarounds aside from applying the patch.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-1284
References: https://github.com/paritytech/frontier/commit/0b962f218f0cdd796dadfe26c3f09e68f7861b26; https://github.com/paritytech/frontier/pull/465; https://github.com/paritytech/frontier/pull/465/commits/8a2b890a2fb477d5fedd0e4335b[PII_REDACTED]9ae
CVE: CVE-2021-30606
Published: 2021-09-03
Description: Chromium: CVE-2021-30606 Use after free in Blink
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30606; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/
CVE: CVE-2021-30607
Published: 2021-09-03
Description: Chromium: CVE-2021-30607 Use after free in Permissions
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30607; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/
CVE: CVE-2021-30608
Published: 2021-09-03
Description: Chromium: CVE-2021-30608 Use after free in Web Share
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30608; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/
CVE: CVE-2021-30609
Published: 2021-09-03
Description: Chromium: CVE-2021-30609 Use after free in Sign-In
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30609; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/
CVE: CVE-2021-30610
Published: 2021-09-03
Description: Chromium: CVE-2021-30610 Use after free in Extensions API
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30610; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/
CVE: CVE-2021-30611
Published: 2021-09-03
Description: Chromium: CVE-2021-30611 Use after free in WebRTC
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30611; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/
CVE: CVE-2021-30612
Published: 2021-09-03
Description: Chromium: CVE-2021-30612 Use after free in WebRTC
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30612; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/
CVE: CVE-2021-30613
Published: 2021-09-03
Description: Chromium: CVE-2021-30613 Use after free in Base internals
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-30613; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/