Archive

10 November 2021

Vulnerabilities first published on this day (UTC), newest first.

← October 2021 2021 / November /10 December 2021 →

All Critical High Medium Low Exploited only Public exploit

131 results · Feed

High 7.8

CVE-2021-42322

Visual Studio Code Elevation of Privilege Vulnerability

Visual Studio Code Elevation of Privilege Vulnerability

Microsoft Visual Studio Code

Nov 10, 2021
High 8.8

CVE-2021-42321 Exploited · Ransomware Public exploit EPSS 92%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22 Microsoft Exchange Server 2016 Cumulative Update 21

Nov 10, 2021
KEV Nov 17, 2021
Medium 4.7

CVE-2021-42319

Visual Studio Elevation of Privilege Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)

Nov 10, 2021
High 8.8

CVE-2021-42316

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 9.1

Nov 10, 2021
Medium 6.5

CVE-2021-42305

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22

Nov 10, 2021
Medium 6.6

CVE-2021-42304

Azure RTOS Elevation of Privilege Vulnerability

Azure RTOS Elevation of Privilege Vulnerability

Microsoft Azure Real Time Operating System

Nov 10, 2021
Medium 6.6

CVE-2021-42303

Azure RTOS Elevation of Privilege Vulnerability

Azure RTOS Elevation of Privilege Vulnerability

Microsoft Azure Real Time Operating System

Nov 10, 2021
Medium 6.6

CVE-2021-42302

Azure RTOS Elevation of Privilege Vulnerability

Azure RTOS Elevation of Privilege Vulnerability

Microsoft Azure Real Time Operating System

Nov 10, 2021
Low 3.3

CVE-2021-42301

Azure RTOS Information Disclosure Vulnerability

Azure RTOS Information Disclosure Vulnerability

Microsoft Azure Real Time Operating System

Nov 10, 2021
Medium 6.0

CVE-2021-42300

Azure Sphere Tampering Vulnerability

Azure Sphere Tampering Vulnerability

Microsoft Azure Sphere

Nov 10, 2021
High 7.8

CVE-2021-42298

Microsoft Defender Remote Code Execution Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Microsoft Microsoft Malware Protection Engine

Nov 10, 2021
High 7.8

CVE-2021-42296

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021

Nov 10, 2021
High 7.8

CVE-2021-42292 Exploited Public exploit EPSS 43%

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Excel Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Nov 10, 2021
KEV Nov 17, 2021
High 7.5

CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
Medium 5.7

CVE-2021-42288

Windows Hello Security Feature Bypass Vulnerability

Windows Hello Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
High 7.5

CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022
High 7.8

CVE-2021-42286

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 21H1 Windows

Nov 10, 2021
High 7.8

CVE-2021-42285

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
Medium 6.8

CVE-2021-42284

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
High 8.8

CVE-2021-42283

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
High 7.5

CVE-2021-42282

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
Medium 5.5

CVE-2021-42280

Windows Feedback Hub Elevation of Privilege Vulnerability

Windows Feedback Hub Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
Medium 4.2

CVE-2021-42279

Chakra Scripting Engine Memory Corruption Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2022 Windows NuGet

Nov 10, 2021
High 7.5

CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

Active Directory Domain Services Elevation of Privilege Vulnerability

Active Directory Domain Services Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Nov 10, 2021
KEV Apr 11, 2022
Medium 5.5

CVE-2021-42277

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
High 7.8

CVE-2021-42276

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
High 8.8

CVE-2021-42275

Microsoft COM for Windows Remote Code Execution Vulnerability

Microsoft COM for Windows Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
Medium 6.8

CVE-2021-42274

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
Medium 5.5

CVE-2021-41379 Exploited · Ransomware EPSS 19%

Windows Installer Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
KEV Mar 3, 2022
High 7.8

CVE-2021-41378

Windows NTFS Remote Code Execution Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
High 7.8

CVE-2021-41377

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
Low 2.3

CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

Microsoft Azure Sphere

Nov 10, 2021
Medium 4.4

CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

Microsoft Azure Sphere

Nov 10, 2021
Medium 6.7

CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

Microsoft Azure Sphere

Nov 10, 2021
Medium 5.5

CVE-2021-41373

FSLogix Information Disclosure Vulnerability

FSLogix Information Disclosure Vulnerability

Microsoft FSLogix

Nov 10, 2021
High 7.6

CVE-2021-41372

Power BI Report Server Spoofing Vulnerability

A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vuln…

Microsoft Power BI Report Server version 1.11.8091.10468 Power BI Report Server version 1.12.7977.29537

Nov 10, 2021
Medium 4.4

CVE-2021-41371

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
High 7.8

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021
Medium 6.1

CVE-2021-41368

Microsoft Access Remote Code Execution Vulnerability

Microsoft Access Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Nov 10, 2021
High 7.8

CVE-2021-41367

NTFS Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Nov 10, 2021