rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-26391 
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.
Problem types: description: TBD
Affected products: vendor: AMD
product: AMD Radeon RX 5000 Series & PRO W5000 Series
vendor: AMD
product: AMD Radeon RX 6000 Series & PRO W6000 Series
Published: 2022-11-09T20:44:25.253Z
CVE-2021-26392 
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.
Affected products: vendor: AMD
product: AMD Radeon RX 5000 Series & PRO W5000 Series
default_status: unaffected
vendor: AMD
product: AMD Radeon RX 6000 Series & PRO W6000 Series
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded 5000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™Embedded V3000
default_status: unaffected
Published: 2022-11-09T20:44:26.258Z
CVE-2021-26393 
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.
Affected products: vendor: AMD
product: AMD Radeon RX 5000 Series & PRO W5000 Series
default_status: unaffected
vendor: AMD
product: AMD Radeon RX 6000 Series & PRO W6000 Series
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded R2000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V1000
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ Embedded V2000
default_status: unaffected
Published: 2022-11-09T20:44:25.517Z
CVE-2021-26396 
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.


Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:39.130Z
CVE-2021-26397 
Insufficient address validation, may allow an
attacker with a compromised ABL and UApp to corrupt sensitive memory locations
potentially resulting in a loss of integrity or availability.








Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™ 
default_status: unaffected
Published: 2023-05-09T18:36:19.135Z
CVE-2021-26398 
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.


Problem types: description: n/a
Affected products: vendor: AMD
product: 1st Gen EPYC 
default_status: unaffected
vendor: AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:40.452Z
CVE-2021-26400 
AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Processors
Published: 2022-05-11T16:36:21.153Z
CVE-2021-26401 
LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Processors
Published: 2022-03-11T17:54:34.241Z
CVE-2021-26402 
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.


Problem types: description: n/a
Affected products: vendor: AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:41.784Z
CVE-2021-26403 
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

Problem types: description: n/a
Affected products: vendor: AMD
product: 1st Gen EPYC
default_status: unaffected
vendor:  AMD
product: 2nd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:43.160Z
CVE-2021-26404 
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.

Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:44.456Z
CVE-2021-26406 
Insufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.





Affected products: vendor: AMD
product: Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
default_status: unaffected
vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
default_status: unaffected
vendor: AMD
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP
default_status: unaffected
vendor: AMD
product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”
default_status: unaffected
vendor: AMD
product: Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5
default_status: unaffected
vendor: AMD
product: Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”
default_status: unaffected
vendor: AMD
product: 1st Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
Published: 2023-05-09T18:59:29.119Z
CVE-2021-26407 
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure.

Problem types: description: n/a
Affected products: vendor:  AMD
product: 2nd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:45.757Z
CVE-2021-26408 
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Problem types: description: tbd
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
Published: 2022-05-10T18:22:50.329Z
CVE-2021-26409 
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity.  


Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:47.043Z
CVE-2021-26410 
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.
Problem types: cwe_id: CWE-822
description: CWE-822  Untrusted Pointer Dereference
Affected products: vendor: AMD
product: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
default_status: affected
vendor: AMD
product: AMD Ryzen™ 4000 Series Desktop Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R1000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded R2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V2000 Series Processors
default_status: affected
vendor: AMD
product: AMD Ryzen™ Embedded V3000 Series Processors
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W5000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ RX 6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO W6000 Series Graphics Products
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V520
default_status: affected
vendor: AMD
product: AMD Radeon™ PRO V620
default_status: affected
Published: 2026-02-10T19:48:36.645Z
CVE-2021-26411 Internet Explorer Memory Corruption Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 9
cpes: cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
vendor: Microsoft
product: Internet Explorer 11
cpes: cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based)
cpes: cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C
Published: 2021-03-11T15:07:28.000Z
CVE-2021-26412 Microsoft Exchange Server Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 23
cpes: cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 7
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 18
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 19
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 8
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2021-03-02T23:55:24.000Z
CVE-2021-26416 Windows Hyper-V Denial of Service Vulnerability
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server version 20H2
cpes: cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1607
cpes: cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server 2016
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.7
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C
Published: 2021-04-13T19:32:34.000Z
CVE-2021-26417 Windows Overlay Filter Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server, version 1909 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 20H2
cpes: cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_20H2:*:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server version 20H2
cpes: cpe:2.3:o:microsoft:windows_server_20H2:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Published: 2021-04-13T19:32:35.000Z
CVE-2021-26418 Microsoft SharePoint Server Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
cpes: cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Foundation 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.6
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C
Published: 2021-05-11T19:11:10.000Z
CVE-2021-26419 Scripting Engine Memory Corruption Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 11
cpes: cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
vendor: Microsoft
product: Internet Explorer 9
cpes: cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2021-05-11T19:11:11.000Z
CVE-2021-26420 Microsoft SharePoint Server Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
cpes: cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Foundation 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:12.000Z
CVE-2021-26421 Skype for Business and Lync Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Skype for Business Server 2015 CU11
cpes: cpe:2.3:a:microsoft:skype_for_business_server:2015:cumulative_update_11:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Lync Server 2013 CU10
cpes: cpe:2.3:a:microsoft:lync_server:2013:cumulative_update_10:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
Published: 2021-05-11T19:11:12.000Z
CVE-2021-26422 Skype for Business and Lync Remote Code Execution Vulnerability
Problem types: description: Security Feature Bypass
Affected products: vendor: Microsoft
product: Microsoft Lync Server 2013 CU10
cpes: cpe:2.3:a:microsoft:lync_server:2013:cumulative_update_10:*:*:*:*:*:*
vendor: Microsoft
product: Skype for Business Server 2019 CU5
cpes: cpe:2.3:a:microsoft:skype_for_business_server:2019:cumulative_update_5:*:*:*:*:*:*
vendor: Microsoft
product: Skype for Business Server 2015 CU11
cpes: cpe:2.3:a:microsoft:skype_for_business_server:2015:cumulative_update_11:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-05-11T19:11:13.000Z
CVE-2021-26423 .NET Core and Visual Studio Denial of Service Vulnerability
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
cpes: cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Visual Studio 2019 for Mac version 8.10
cpes: cpe:2.3:a:microsoft:visual_studio_2019:8.10:*:*:*:*:macos:*:*
vendor: Microsoft
product: .NET Core 2.1
cpes: cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
vendor: Microsoft
product: .NET Core 3.1
cpes: cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
vendor: Microsoft
product: .NET 5.0
cpes: cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
vendor: Microsoft
product: PowerShell Core 7.1
cpes: cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*
vendor: Microsoft
product: PowerShell Core 7.0
cpes: cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Published: 2021-08-12T18:11:31.000Z
CVE-2021-26427 Microsoft Exchange Server Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 22
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 11
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2013 Cumulative Update 23
cpes: cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2016 Cumulative Update 21
cpes: cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Exchange Server 2019 Cumulative Update 10
cpes: cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: CRITICAL
baseScore: 9
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-10-13T00:26:32.000Z
CVE-2021-26428 Azure Sphere Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Azure Sphere
cpes: cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.4
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2021-08-12T18:11:37.000Z
CVE-2021-26429 Azure Sphere Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Azure Sphere
cpes: cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L/E:P/RL:O/RC:C
Published: 2021-08-12T18:11:39.000Z
CVE-2021-26430 Azure Sphere Denial of Service Vulnerability
Problem types: description: Denial of Service
Affected products: vendor: Microsoft
product: Azure Sphere
cpes: cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
Published: 2021-08-12T18:11:40.000Z
CVE-2021-26431 Windows Recovery Environment Agent Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 21H1
cpes: cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1165:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1165:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1165:*:*:*:*:*:x86:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.1165:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1165:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 20H2
cpes: cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1165:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1165:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server version 20H2
cpes: cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1165:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-08-12T18:11:42.000Z
CVE-2021-26434 Visual Studio Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
cpes: cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
cpes: cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-09-15T11:23:00.000Z