Skip to main content
CVE-2021-36968 Sep 15, 12:15 HIGH PATCH This Week

Windows DNS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows 7
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-38638 Sep 15, 12:15 HIGH PATCH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-38630 Sep 15, 12:15 HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-38628 Sep 15, 12:15 HIGH PATCH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-38626 Sep 15, 12:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-38625 Sep 15, 12:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-36974 Sep 15, 12:15 HIGH PATCH This Week

Windows SMB Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +4
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-36973 Sep 15, 12:15 HIGH PATCH This Week

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +1
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-36966 Sep 15, 12:15 HIGH PATCH This Week

Windows Subsystem for Linux Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows 10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-36964 Sep 15, 12:15 HIGH PATCH This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD VulDB
CVSS 3.1
7.8
EPSS
0.5%
CVE-2021-38652 Sep 15, 12:15 HIGH PATCH This Week

Microsoft SharePoint Server Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Microsoft Sharepoint Enterprise Server Sharepoint Foundation
NVD VulDB
CVSS 3.1
7.6
EPSS
1.2%
CVE-2021-38651 Sep 15, 12:15 HIGH PATCH This Week

Microsoft SharePoint Server Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Microsoft Sharepoint Enterprise Server Sharepoint Server Sharepoint Foundation
NVD VulDB
CVSS 3.1
7.6
EPSS
1.2%
CVE-2021-33700 Sep 15, 19:15 HIGH PATCH This Week

SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure SAP Business One
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2021-40156 Sep 15, 17:15 HIGH This Week

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Navisworks Autodesk
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2021-40155 Sep 15, 17:15 HIGH This Week

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Navisworks Autodesk
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2021-27046 Sep 15, 17:15 HIGH This Week

A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously crafted DLL files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Navisworks Autodesk
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2021-27045 Sep 15, 17:15 HIGH This Week

A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Navisworks Autodesk
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2021-40157 Sep 15, 15:15 HIGH PATCH This Week

A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

RCE Buffer Overflow Fbx Review Autodesk
NVD
CVSS 3.1
7.8
EPSS
0.8%
CVE-2021-27044 Sep 15, 15:15 HIGH PATCH This Week

A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted DLL files or information disclosure. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Information Disclosure Fbx Review Autodesk
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2021-33692 Sep 15, 19:15 HIGH PATCH This Week

SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal SAP Cloud Connector
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-39215 Sep 15, 18:15 HIGH PATCH This Week

Jitsi Meet is an open source video conferencing application. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Jitsi Meet 8X8
NVD GitHub
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-29750 Sep 15, 18:15 HIGH PATCH This Week

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM Qradar Security Information And Event Manager
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2021-38634 Sep 15, 12:15 HIGH PATCH This Week

Microsoft Windows Update Client Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +1
NVD VulDB
CVSS 3.1
7.1
EPSS
0.8%
Prev Page 2 of 2

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy