Security Radar

CVE-2021-31955 Severity under analysis added on 11/03/2021

Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft · Windows · CWE-497

Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.

CVE-2021-31755 Severity under analysis added on 11/03/2021

Tenda AC11 Router Stack Buffer Overflow Vulnerability

Tenda · AC11 Router · CWE-787

Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.

CVE-2021-31207 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft · Exchange Server · CWE-20, CWE-434

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

CVE-2021-31201 Severity under analysis added on 11/03/2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Provider

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-31199 Severity under analysis added on 11/03/2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Provider

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-30869 Severity under analysis added on 11/03/2021

Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

Apple · iOS, iPadOS, and macOS · CWE-843

Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.

CVE-2021-30860 Severity under analysis added on 11/03/2021

Apple Multiple Products Integer Overflow Vulnerability

Apple · Multiple Products · CWE-20, CWE-190

Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.

CVE-2021-30858 Severity under analysis added on 11/03/2021

Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

Apple · iOS, iPadOS, and macOS · CWE-416

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CVE-2021-30807 Severity under analysis added on 11/03/2021

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Products · CWE-787

Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.

CVE-2021-30762 Severity under analysis added on 11/03/2021

Apple iOS WebKit Use-After-Free Vulnerability

Apple · iOS · CWE-416

Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CVE-2021-30761 Severity under analysis added on 11/03/2021

Apple iOS WebKit Memory Corruption Vulnerability

Apple · iOS · CWE-787

Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CVE-2021-30713 Severity under analysis added on 11/03/2021

Apple macOS Unspecified Vulnerability

Apple · macOS · CWE-862

Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.

CVE-2021-30666 Severity under analysis added on 11/03/2021

Apple iOS WebKit Buffer Overflow Vulnerability

Apple · iOS · CWE-119

Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CVE-2021-30665 Severity under analysis added on 11/03/2021

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Products · CWE-787

Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CVE-2021-30663 Severity under analysis added on 11/03/2021

Apple Multiple Products WebKit Integer Overflow Vulnerability

Apple · Multiple Products · CWE-20, CWE-190

Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CVE-2021-30661 Severity under analysis added on 11/03/2021

Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

Apple · Multiple Products · CWE-416

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CVE-2021-30657 Severity under analysis added on 11/03/2021

Apple macOS Unspecified Vulnerability

Apple · macOS · CWE-862

Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.

CVE-2021-30633 Severity under analysis added on 11/03/2021

Google Chromium Indexed DB API Use-After-Free Vulnerability

Google · Chromium Indexed DB API · CWE-416

Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30632 Severity under analysis added on 11/03/2021

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8 · CWE-122

Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30563 Severity under analysis added on 11/03/2021

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-122, CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30554 Severity under analysis added on 11/03/2021

Google Chromium WebGL Use-After-Free Vulnerability

Google · Chromium WebGL · CWE-416

Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30551 Severity under analysis added on 11/03/2021

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-122, CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-30116 Severity under analysis Ransomware added on 11/03/2021

Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

Kaseya · Virtual System/Server Administrator (VSA) · CWE-522

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

CVE-2021-28664 Severity under analysis added on 11/03/2021

Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

Arm · Mali Graphics Processing Unit (GPU) · CWE-787

Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.