August 2021

15 results · Clear filters · Feed

• High 8.2
  CVE-2021-32648 Exploited Public exploit EPSS 91%

  Account Takeover in Octobercms

  octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been pat…

  octobercms october october/system Packagist
  Aug 26, 2021

  KEV Jan 18, 2022
• High 7.5
  CVE-2021-31010 Exploited

  A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Cata…

  Apple macOS watchOS macOS
  Aug 24, 2021

  KEV Aug 25, 2022
• High 7.8
  CVE-2021-30983 Exploited

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. A…

  Apple iOS and iPadOS iOS
  Aug 24, 2021

  KEV Jun 27, 2022
• High 8.8
  CVE-2021-30952 Exploited

  An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1…

  Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine
  Aug 24, 2021

  KEV Mar 5, 2026
• High 7.8
  CVE-2021-30900 Exploited

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS …

  Apple iOS and iPadOS iOS
  Aug 24, 2021

  KEV Mar 30, 2023
• High 7.8
  CVE-2021-30883 Exploited EPSS 15%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.…

  Apple macOS iOS and iPadOS macOS iOS
  Aug 24, 2021

  KEV May 23, 2022
• High 7.8
  CVE-2021-30869 Exploited

  A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPad…

  Apple macOS iOS and iPadOS macOS iOS
  Aug 24, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30860 Exploited Public exploit EPSS 76%

  An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catal…

  Apple macOS watchOS iOS macOS iOS
  Aug 24, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30858 Exploited Public exploit EPSS 13%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, …

  Apple macOS iOS qtwebkit-source macOS iOS Debian Ubuntu Alpine
  Aug 24, 2021

  KEV Nov 3, 2021
• High 8.5
  CVE-2021-39144 Exploited Public exploit EPSS 98%

  XStream is vulnerable to a Remote Command Execution attack

  XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affec…

  x-stream xstream com.thoughtworks.xstream:xstream libxstream-java Debian Ubuntu Maven
  Aug 23, 2021

  KEV Mar 10, 2023
• High 7.8
  CVE-2021-36948 Exploited EPSS 23%

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-34486 Exploited Public exploit

  Windows Event Tracing Elevation of Privilege Vulnerability

  Windows Event Tracing Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Mar 28, 2022
• High 7.8
  CVE-2021-34484 Exploited EPSS 22%

  Windows User Profile Service Elevation of Privilege Vulnerability

  Windows User Profile Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Mar 31, 2022
• High 8.8
  CVE-2021-30563 Exploited

  Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Aug 3, 2021

  KEV Nov 3, 2021