Security Radar

CVE-2021-31207 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft · Exchange Server · CWE-20, CWE-434

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

CVE-2021-31201 Severity under analysis added on 11/03/2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Provider

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-31199 Severity under analysis added on 11/03/2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Provider

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-30633 Severity under analysis added on 11/03/2021

Google Chromium Indexed DB API Use-After-Free Vulnerability

Google · Chromium Indexed DB API · CWE-416

Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30632 Severity under analysis added on 11/03/2021

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8 · CWE-122

Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30563 Severity under analysis added on 11/03/2021

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-122, CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30554 Severity under analysis added on 11/03/2021

Google Chromium WebGL Use-After-Free Vulnerability

Google · Chromium WebGL · CWE-416

Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30551 Severity under analysis added on 11/03/2021

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-122, CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-28550 Severity under analysis added on 11/03/2021

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe · Acrobat and Reader · CWE-416

Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

CVE-2021-28310 Severity under analysis added on 11/03/2021

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-787

Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-27085 Severity under analysis added on 11/03/2021

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorer

Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.

CVE-2021-27065 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-39

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-27059 Severity under analysis added on 11/03/2021

Microsoft Office Remote Code Execution Vulnerability

Microsoft · Office

Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

CVE-2021-26858 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26857 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26855 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-918

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26411 Severity under analysis Ransomware added on 11/03/2021

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-416

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

CVE-2021-26084 Severity under analysis Ransomware added on 11/03/2021

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

Atlassian · Confluence Server and Data Center · CWE-917

Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.

CVE-2021-22986 Severity under analysis Ransomware added on 11/03/2021

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 · BIG-IP and BIG-IQ Centralized Management · CWE-863

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.

CVE-2021-22900 Severity under analysis added on 11/03/2021

Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

Ivanti · Pulse Connect Secure · CWE-94

Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.

CVE-2021-22899 Severity under analysis added on 11/03/2021

Ivanti Pulse Connect Secure Command Injection Vulnerability

Ivanti · Pulse Connect Secure · CWE-77

Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles.

CVE-2021-22894 Severity under analysis added on 11/03/2021

Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Ivanti · Pulse Connect Secure · CWE-94

Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.

CVE-2021-22893 Severity under analysis Ransomware added on 11/03/2021

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti · Pulse Connect Secure · CWE-287

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

CVE-2021-22005 Severity under analysis Ransomware added on 11/03/2021

VMware vCenter Server File Upload Vulnerability

VMware · vCenter Server · CWE-23

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.