Microsoft Security Vulnerabilities

CVE-2021-21129

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVE-2021-21130

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVE-2021-21131

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.

CVE-2021-21133

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.

CVE-2021-21134

Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.

CVE-2021-21135

Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVE-2021-21136

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.

CVE-2021-21139

Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVE-2021-21140

Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.

CVE-2021-21141

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.

CVE-2021-21157

Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21552

Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass the restricted environment and perform unauthorized actions on the af...

CVE-2021-23338

This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

CVE-2021-24066

Microsoft SharePoint Remote Code Execution Vulnerability

CVE-2021-24067

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-24068

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-24069

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-24070

Microsoft Excel Remote Code Execution Vulnerability

CVE-2021-24071

Microsoft SharePoint Information Disclosure Vulnerability

CVE-2021-24072

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2021-24073

Skype for Business and Lync Spoofing Vulnerability

CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2021-24075

Microsoft Windows VMSwitch Denial of Service Vulnerability

CVE-2021-24076

Microsoft Windows VMSwitch Information Disclosure Vulnerability

CVE-2021-24077

Windows Fax Service Remote Code Execution Vulnerability

CVE-2021-24078

Windows DNS Server Remote Code Execution Vulnerability

CVE-2021-24079

Windows Backup Engine Information Disclosure Vulnerability

CVE-2021-24080

Windows Trust Verification API Denial of Service Vulnerability

CVE-2021-24081

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

CVE-2021-24082

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability

CVE-2021-24083

Windows Address Book Remote Code Execution Vulnerability

CVE-2021-24084

Windows Mobile Device Management Information Disclosure Vulnerability

CVE-2021-24085

Microsoft Exchange Server Spoofing Vulnerability

CVE-2021-24086

Windows TCP/IP Denial of Service Vulnerability

CVE-2021-24087

Azure IoT CLI extension Elevation of Privilege Vulnerability

CVE-2021-24088

Windows Local Spooler Remote Code Execution Vulnerability

CVE-2021-24089

HEVC Video Extensions Remote Code Execution Vulnerability

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2021-24091

Windows Camera Codec Pack Remote Code Execution Vulnerability

CVE-2021-24092

Microsoft Defender Elevation of Privilege Vulnerability

CVE-2021-24093

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2021-24094

Windows TCP/IP Remote Code Execution Vulnerability

CVE-2021-24095

DirectX Elevation of Privilege Vulnerability

CVE-2021-24096

Windows Kernel Elevation of Privilege Vulnerability

CVE-2021-24098

Windows Console Driver Denial of Service Vulnerability

CVE-2021-24099

Skype for Business and Lync Denial of Service Vulnerability

CVE-2021-24100

Microsoft Edge for Android Information Disclosure Vulnerability

CVE-2021-24101

Microsoft Dataverse Information Disclosure Vulnerability