Archive

15 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /15 January 2022 →

All Critical High Medium Low Exploited only Public exploit

255 results · Feed

High 7.8

CVE-2021-43229 Public exploit

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.5

CVE-2021-43228

SymCrypt Denial of Service Vulnerability

SymCrypt Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.8

CVE-2021-43226 Exploited · Ransomware Public exploit

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
KEV Oct 6, 2025
Medium 5.5

CVE-2021-43227

Storage Spaces Controller Information Disclosure Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.5

CVE-2021-43225

Bot Framework SDK Remote Code Execution Vulnerability

Bot Framework SDK Remote Code Execution Vulnerability

Microsoft Bot Framework SDK for .NET Framework

Dec 15, 2021
Medium 5.5

CVE-2021-43224 Public exploit

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.8

CVE-2021-43223

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.5

CVE-2021-43222

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.4

CVE-2021-43219

DirectX Graphics Kernel File Denial of Service Vulnerability

DirectX Graphics Kernel File Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 8.1

CVE-2021-43217 Public exploit

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
Medium 6.5

CVE-2021-43216

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
Critical 9.8

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.8

CVE-2021-43214

Web Media Extensions Remote Code Execution Vulnerability

Web Media Extensions Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Dec 15, 2021
High 7.8

CVE-2021-43207

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 8.0

CVE-2021-42320

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Dec 15, 2021
High 8.8

CVE-2021-42315

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Microsoft Defender for IoT

Dec 15, 2021
High 8.8

CVE-2021-42314

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Microsoft Defender for IoT

Dec 15, 2021
Critical 10.0

CVE-2021-42313

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Microsoft Defender for IoT

Dec 15, 2021
High 7.8

CVE-2021-42312

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Microsoft Defender for IoT Elevation of Privilege Vulnerability

Microsoft Microsoft Defender for IoT

Dec 15, 2021
High 8.1

CVE-2021-42310

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Microsoft Defender for IoT

Dec 15, 2021
Critical 10.0

CVE-2021-42311

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Microsoft Defender for IoT

Dec 15, 2021
High 8.8

CVE-2021-42309

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Dec 15, 2021
Medium 5.5

CVE-2021-42295

Visual Basic for Applications Information Disclosure Vulnerability

Visual Basic for Applications Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Dec 15, 2021
Medium 6.5

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Dec 15, 2021
High 7.2

CVE-2021-42294

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Dec 15, 2021
High 8.8

CVE-2021-41365

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Defender for IoT Remote Code Execution Vulnerability

Microsoft Microsoft Defender for IoT

Dec 15, 2021
High 7.8

CVE-2021-41360

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions

Dec 15, 2021
High 7.8

CVE-2021-40453

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions

Dec 15, 2021
High 7.8

CVE-2021-41333

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 15, 2021
High 7.8

CVE-2021-40452

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions

Dec 15, 2021
High 7.8

CVE-2021-40441

Windows Media Center Elevation of Privilege Vulnerability

Windows Media Center Elevation of Privilege Vulnerability

Microsoft Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 Windows

Dec 15, 2021
Medium 6.6

CVE-2021-4116

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

yetiforcecompany yetiforcecompany/yetiforcecrm yetiforce/yetiforce-crm Packagist

Dec 15, 2021
Medium 6.5

CVE-2021-20330

Specific replication command with malformed oplog entries can crash secondaries

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27;…

MongoDB MongoDB Server

Dec 15, 2021
High 7.3

CVE-2021-4111

Business Logic Errors in yetiforcecompany/yetiforcecrm

yetiforcecrm is vulnerable to Business Logic Errors

yetiforcecompany yetiforcecompany/yetiforcecrm yetiforce/yetiforce-crm Packagist

Dec 15, 2021
Unscored —

CVE-2021-45043 Public exploit Scanner template EPSS 33%

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_…

Dec 15, 2021
Unscored —

CVE-2019-19138

Ivanti Workspace Control before 10.4.50.0 allows attackers to degrade integrity.

Dec 15, 2021
Unscored —

CVE-2020-23545

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.

Dec 15, 2021
Unscored —

CVE-2021-26787

A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record deletion…

Dec 15, 2021
Unscored —

CVE-2021-36450 Scanner template EPSS 64%

Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.

Dec 15, 2021
Unscored —

CVE-2021-38701

Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68;…

Dec 15, 2021