CVEs published in November 2021
38 tracked CVEs from 3 vendors had their first vendor advisory published in November 2021: 1 critical, 23 high, 4 in CISA KEV. Newest first.
1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2021-36807High
authenticated user could potentially execute code
Sophos · 1 advisory - Added
CVE-2021-25269Medium
Intercept X: local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path…
Sophos · 1 advisory - Added
CVE-2021-42306High
Azure Active Directory Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42321HighCISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42305Medium
Microsoft Exchange Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42291High
Active Directory Domain Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42288Medium
Windows Hello Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42287HighCISA KEV
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42286High
Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42285High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42284Medium
Windows Hyper-V Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42283High
NTFS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42282High
Active Directory Domain Services Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42280Medium
Windows Feedback Hub Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42279Medium
Chakra Scripting Engine Memory Corruption Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42278HighCISA KEV
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42277Medium
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42276High
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42275High
Microsoft COM for Windows Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-42274Medium
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41379MediumCISA KEV
Microsoft Windows Installer Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41378High
Windows NTFS Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41377High
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41371Medium
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41370High
NTFS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41367High
NTFS Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41366High
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41356High
Windows Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41349Medium
Microsoft Exchange Server Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2021-40442High
Microsoft Excel Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-38666High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-38665High
Remote Desktop Protocol Client Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-38631Medium
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2021-36957High
Windows Desktop Bridge Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2021-26443Critical
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41312High
Jira Service Management: Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-41310Medium
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript
Atlassian · 1 advisory - Added
CVE-2021-41313Medium
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory