CVE 2021 document archive · 27
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
2,160 documents · Identifier year 2021 · 27 / 44
- CVE-2021-30889webkitgtk: Buffer overflow leading to arbitrary code execution
- CVE-2021-30888webkitgtk: Information leak via Content Security Policy reports
- CVE-2021-30887webkitgtk: Logic issue leading to Content Security Policy bypass
- CVE-2021-30884webkitgtk: CSS compositing issue leading to revealing of the browsing history
- CVE-2021-30858webkitgtk: Use-after-free leading to arbitrary code execution
- CVE-2021-30851webkitgtk: Memory corruption issue leading to arbitrary code execution
- CVE-2021-30849webkitgtk: Multiple memory corruption issue leading to arbitrary code execution
- CVE-2021-30848webkitgtk: Memory corruption issue leading to arbitrary code execution
- CVE-2021-30846webkitgtk: Memory corruption issue leading to arbitrary code execution
- CVE-2021-30836webkitgtk: Out-of-bounds read leading to memory disclosure
- CVE-2021-30823webkitgtk: Logic issue leading to HSTS bypass
- CVE-2021-30818webkitgtk: Type confusion issue leading to arbitrary code execution
- CVE-2021-30809webkitgtk: Use-after-free leading to arbitrary code execution
- CVE-2021-30799webkitgtk: Memory corruptions leading to arbitrary code execution
- CVE-2021-30797webkitgtk: Insufficient checks leading to arbitrary code execution
- CVE-2021-30795webkitgtk: Use-after-free leading to arbitrary code execution
- CVE-2021-30762webkitgtk: Use-after-free leading to arbitrary code execution
- CVE-2021-30761webkitgtk: Memory corruption leading to arbitrary code execution
- CVE-2021-30758webkitgtk: Type confusion leading to arbitrary code execution
- CVE-2021-30749webkitgtk: Memory corruptions leading to arbitrary code execution
- CVE-2021-30744webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack
- CVE-2021-30734webkitgtk: Memory corruptions leading to arbitrary code execution
- CVE-2021-30720webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers
- CVE-2021-30689webkitgtk: Logic issue leading to universal cross site scripting attack
- CVE-2021-30682webkitgtk: Logic issue leading to leak of sensitive user information
- CVE-2021-30666webkitgtk: Buffer overflow leading to arbitrary code execution
- CVE-2021-30665webkitgtk: Memory corruption leading to arbitrary code execution
- CVE-2021-30663webkitgtk: Integer overflow leading to arbitrary code execution
- CVE-2021-30661webkitgtk: Use-after-free leading to arbitrary code execution
- CVE-2021-30641httpd: Unexpected URL matching with 'MergeSlashes OFF'
- CVE-2021-30640tomcat: JNDI realm authentication weakness
- CVE-2021-30639tomcat: non-blocking I/O error flag is not reset between requests
- CVE-2021-30547chromium-browser: Out of bounds write in ANGLE
- CVE-2021-30465runc: vulnerable to symlink exchange attack
- CVE-2021-30178kernel: NULL pointer dereference in synic_get function in arch/x86/kvm/hyperv.c for certain accesses to the SynIC Hyper-V context
- CVE-2021-30047vsftpd: denial of service due to limited number of connections allowed
- CVE-2021-30004wpa_supplicant: mishandled AlgorithmIdentifier parameters may lead to forging attacks
- CVE-2021-30002kernel: memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c
- CVE-2021-29991Mozilla: Header Splitting possible with HTTP/3 Responses
- CVE-2021-29989Mozilla: Memory safety bugs fixed in Thunderbird 78.13
- CVE-2021-29988Mozilla: Memory corruption as a result of incorrect style treatment
- CVE-2021-29986Mozilla: Race condition when resolving DNS names could have led to memory corruption
- CVE-2021-29985Mozilla: Use-after-free media channels
- CVE-2021-29984Mozilla: Incorrect instruction reordering during JIT optimization
- CVE-2021-29980Mozilla: Uninitialized memory in a canvas object could have led to memory corruption
- CVE-2021-29976Mozilla: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
- CVE-2021-29970Mozilla: Use-after-free in accessibility features of a document
- CVE-2021-29969Mozilla: IMAP server responses sent by a MITM prior to STARTTLS could be processed
- CVE-2021-29967Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- CVE-2021-29964Mozilla: Out of bounds-read when parsing a `WM_COPYDATA` message