CVEs published in August 2021
39 tracked CVEs from 3 vendors had their first vendor advisory published in August 2021: 3 critical, 27 high, 7 in CISA KEV. Newest first.
1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2021-39117Medium
The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0
Atlassian · 1 advisory - Added
CVE-2021-39113High
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-39111Medium
The Editor plugin in Atlassian Jira Server and Data Center before version 8.5.18, from 8.6.0 before 8.13.10, and from version…
Atlassian · 1 advisory - Added
CVE-2021-26084CriticalCISA KEV
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian · 1 advisory - Added
CVE-2021-39112Medium
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to redirect users to a malicious URL
Atlassian · 1 advisory - Added
CVE-2021-26086MediumCISA KEV
Atlassian Jira Server and Data Center Path Traversal Vulnerability
Atlassian · 1 advisory - Added
Eclipse Jetty Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2021-36958High
Windows Print Spooler Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36949High
Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36948HighCISA KEV
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36947High
Windows Print Spooler Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36942HighCISA KEV
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36940High
Microsoft SharePoint Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36938Medium
Windows Cryptographic Primitives Library Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36937High
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36936High
Windows Print Spooler Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36933High
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36932High
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36927High
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36926High
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34537High
Windows Bluetooth Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34536High
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34535High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34534Medium
Windows MSHTML Platform Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34533High
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34530High
Windows Graphics Component Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34487High
Windows Event Tracing Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34486HighCISA KEV
Microsoft Windows Event Tracing Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34484HighCISA KEV
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34483High
Windows Print Spooler Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-34480Medium
Scripting Engine Memory Corruption Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26433High
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26432Critical
Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26431High
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26426High
Windows User Account Profile Picture Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26425High
Windows Event Tracing Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26424Critical
Windows TCP/IP Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26085MediumCISA KEV
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
Atlassian · 1 advisory - Added
CVE-2017-18113High
The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who
Atlassian · 1 advisory