Skip to contentDebian Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664...CVE-2021-38020Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38019Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a...CVE-2021-38018Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed...CVE-2021-38017Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45...CVE-2021-38016Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker...CVE-2021-38015Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38014Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664...CVE-2021-38013Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...CVE-2021-38012Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38011Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a...CVE-2021-38010Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38009Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...CVE-2021-38008Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...CVE-2021-38007Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...CVE-2021-38006Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...CVE-2021-38005Fix available8.8 High
- google chrome, debian linux +1 moreOut of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4079Fix available8.8 High
- google chrome, debian linux +1 moreType confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4078Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a...CVE-2021-4068Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...CVE-2021-4067Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4066Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4065Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...CVE-2021-4064Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote...CVE-2021-4063Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker...CVE-2021-4062Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4061Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote...CVE-2021-4059Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4058Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who...CVE-2021-4057Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4056Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who...CVE-2021-4055Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote...CVE-2021-4054Fix available6.5 Medium
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to...CVE-2021-4053Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who...CVE-2021-4052Fix available8.8 High
- apache log4j, log4j2, apple xcode +141 more +143 moreApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsCVE-2021-44228In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- netty, debian linux, netapp oncommand workflow automation +15 more +17 moreHTTP fails to validate against control chars in header names which may lead to HTTP request smugglingCVE-2021-43797Fix available6.5 Medium
- mozilla thunderbird, debian linux +1 moreThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...CVE-2021-43528Fix available6.5 Medium
- debian linux, f5 nginx, fedoraproject fedora +2 more +4 moreALPACA is an application layer protocol content confusion attack, exploiting TLS servers...CVE-2021-3618Fix available7.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible to recreate previous cursor spoofing attacks against users with a zoomed native...CVE-2021-43546Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing the Location API in a loop could have caused severe application hangs and crashes. This...CVE-2021-43545Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDocuments loaded with the CSP sandbox directive could have escaped the sandbox's script...CVE-2021-43543Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUsing XMLHttpRequest, an attacker could have identified installed applications by probing error...CVE-2021-43542Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen invoking protocol handlers for external protocols, a supplied parameter URL containing...CVE-2021-43541Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFailure to correctly record the location of live pointers across wasm instance calls resulted in...CVE-2021-43539Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy misusing a race in our notification code, an attacker could have forcefully hidden the...CVE-2021-43538Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...CVE-2021-43537Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...CVE-2021-43536Fix available6.5 Medium
- owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 moreModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects...CVE-2021-42717Public exploitFix available7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420Fix available7.3 High
- debian linux, linuxfoundation runc +1 moreOverflow in netlink bytemsg length field allows attacker to override netlink-based container configurationCVE-2021-43784Fix available6.0 Medium
- Show moreLoading…