# Vulnerabilities published in 2021


- [CVE-2021-36078](https://insights.sbomify.com/CVE-2021-36078/): Adobe Bridge PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-36077](https://insights.sbomify.com/CVE-2021-36077/): Adobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of Service (medium 5.5)
- [CVE-2021-36076](https://insights.sbomify.com/CVE-2021-36076/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-36075](https://insights.sbomify.com/CVE-2021-36075/): Adobe Bridge Buffer Overflow leads to Arbitrary Code Execution (high 7.8)
- [CVE-2021-36074](https://insights.sbomify.com/CVE-2021-36074/): Adobe Bridge PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36073](https://insights.sbomify.com/CVE-2021-36073/): Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-36072](https://insights.sbomify.com/CVE-2021-36072/): Adobe Bridge SGI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-36071](https://insights.sbomify.com/CVE-2021-36071/): Adobe Bridge PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36070](https://insights.sbomify.com/CVE-2021-36070/): Adobe Media Encoder Improper Memory Access When Parsing SVG Files Could Lead To Remote Code Execution (high 7.8)
- [CVE-2021-3607](https://insights.sbomify.com/CVE-2021-3607/): Integer overflow in QEMU (medium 6.0)
- [CVE-2021-36069](https://insights.sbomify.com/CVE-2021-36069/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-36068](https://insights.sbomify.com/CVE-2021-36068/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-36067](https://insights.sbomify.com/CVE-2021-36067/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-36066](https://insights.sbomify.com/CVE-2021-36066/): Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-36065](https://insights.sbomify.com/CVE-2021-36065/): Adobe Photoshop Heap-Based Buffer Overflow Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-36064](https://insights.sbomify.com/CVE-2021-36064/): XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow (high 7.8)
- [CVE-2021-36063](https://insights.sbomify.com/CVE-2021-36063/): Adobe Connect Reflected Cross-site Scripting via 'isTabletDeviceHTML' parameter (medium 5.4)
- [CVE-2021-36062](https://insights.sbomify.com/CVE-2021-36062/): Adobe Connect Reflected Cross-site Scripting via 'campaign-id' parameter (medium 5.4)
- [CVE-2021-36061](https://insights.sbomify.com/CVE-2021-36061/): Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting Recordings (medium 5.4)
- [CVE-2021-36060](https://insights.sbomify.com/CVE-2021-36060/): Adobe Media Encoder MPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-3606](https://insights.sbomify.com/CVE-2021-3606/): Other in OpenVPN-GUI (high 7.8)
- [CVE-2021-36059](https://insights.sbomify.com/CVE-2021-36059/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-36058](https://insights.sbomify.com/CVE-2021-36058/): XMP Toolkit SDK Integer Overflow Vulnerability Could Result In Application Denial Of Service (medium 5.5)
- [CVE-2021-36057](https://insights.sbomify.com/CVE-2021-36057/): XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service (medium 4.0)
- [CVE-2021-36056](https://insights.sbomify.com/CVE-2021-36056/): XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution (medium 5.5)
- [CVE-2021-36055](https://insights.sbomify.com/CVE-2021-36055/): XMP Toolkit SDK Use After Free Vulnerability In ReadingXMPNewDOM Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-36054](https://insights.sbomify.com/CVE-2021-36054/): Memory corruption in XMP Toolkit (low 3.3)
- [CVE-2021-36053](https://insights.sbomify.com/CVE-2021-36053/): XMP Toolkit SDK Out-of-bounds Read Vulnerability In FindAndReadXMPChunk Could Lead To Information Exposure (low 3.3)
- [CVE-2021-36052](https://insights.sbomify.com/CVE-2021-36052/): XMPToolkit SDK ImportTIFF_CheckStandardMapping Memory Corruption (high 7.8)
- [CVE-2021-36051](https://insights.sbomify.com/CVE-2021-36051/): XMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-36050](https://insights.sbomify.com/CVE-2021-36050/): XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-3605](https://insights.sbomify.com/CVE-2021-3605/): Memory corruption in OpenEXR (medium 5.5)
- [CVE-2021-36049](https://insights.sbomify.com/CVE-2021-36049/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-36048](https://insights.sbomify.com/CVE-2021-36048/): XMP Toolkit SDK Improper Input Validation Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-36047](https://insights.sbomify.com/CVE-2021-36047/): XMP Toolkit SDK Improper Input Validation Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-36046](https://insights.sbomify.com/CVE-2021-36046/): XMP Toolkit SDK TIFF_MemoryReader::SortIFD function Memory Corruption (high 7.8)
- [CVE-2021-36045](https://insights.sbomify.com/CVE-2021-36045/): XMP Toolkit SDK Out-of-bounds Read Vulnerability In PostScriptSupport::ConvertToDate Could Lead To Information Exposure (low 3.3)
- [CVE-2021-36044](https://insights.sbomify.com/CVE-2021-36044/): Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service (high 7.5)
- [CVE-2021-36043](https://insights.sbomify.com/CVE-2021-36043/): Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution (high 8.0)
- [CVE-2021-36042](https://insights.sbomify.com/CVE-2021-36042/): Magento executes code via the API File Option Upload Extension (critical 9.1)
- [CVE-2021-36041](https://insights.sbomify.com/CVE-2021-36041/): Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36040](https://insights.sbomify.com/CVE-2021-36040/): Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-3604](https://insights.sbomify.com/CVE-2021-3604/): Primion-Digitek Secure 8 SQL injection vulnerability (critical 9.8)
- [CVE-2021-36039](https://insights.sbomify.com/CVE-2021-36039/): Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure (medium 6.5)
- [CVE-2021-36038](https://insights.sbomify.com/CVE-2021-36038/): Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure (medium 6.5)
- [CVE-2021-36037](https://insights.sbomify.com/CVE-2021-36037/): Magento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure (medium 6.5)
- [CVE-2021-36036](https://insights.sbomify.com/CVE-2021-36036/): Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution (high 7.2)
- [CVE-2021-36035](https://insights.sbomify.com/CVE-2021-36035/): Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36034](https://insights.sbomify.com/CVE-2021-36034/): Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36033](https://insights.sbomify.com/CVE-2021-36033/): Magento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36032](https://insights.sbomify.com/CVE-2021-36032/): Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation (high 8.3)
- [CVE-2021-36031](https://insights.sbomify.com/CVE-2021-36031/): Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution (high 7.2)
- [CVE-2021-36030](https://insights.sbomify.com/CVE-2021-36030/): Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation (high 7.5)
- [CVE-2021-3603](https://insights.sbomify.com/CVE-2021-3603/): Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer (high 8.1)
- [CVE-2021-36029](https://insights.sbomify.com/CVE-2021-36029/): Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36028](https://insights.sbomify.com/CVE-2021-36028/): Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36027](https://insights.sbomify.com/CVE-2021-36027/): Magento Commerce Stored Cross-site Scripting Vulnerability (medium 6.5)
- [CVE-2021-36026](https://insights.sbomify.com/CVE-2021-36026/): Magento Commerce Stored Cross-site Scripting Vulnerability (medium 6.5)
- [CVE-2021-36025](https://insights.sbomify.com/CVE-2021-36025/): Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36024](https://insights.sbomify.com/CVE-2021-36024/): Magento Commerce Improper Neutralization of Special Elements Used In A Command (critical 9.1)
- [CVE-2021-36023](https://insights.sbomify.com/CVE-2021-36023/): Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36022](https://insights.sbomify.com/CVE-2021-36022/): Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution (critical 9.1)
- [CVE-2021-36021](https://insights.sbomify.com/CVE-2021-36021/): Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution (high 7.2)
- [CVE-2021-36020](https://insights.sbomify.com/CVE-2021-36020/): Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution (high 8.2)
- [CVE-2021-3602](https://insights.sbomify.com/CVE-2021-3602/): Buildah processes using chroot isolation may leak environment values to intermediate processes (medium 5.5)
- [CVE-2021-36019](https://insights.sbomify.com/CVE-2021-36019/): Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36018](https://insights.sbomify.com/CVE-2021-36018/): Adobe After Effects PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36017](https://insights.sbomify.com/CVE-2021-36017/): Adobe After Effects PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-36016](https://insights.sbomify.com/CVE-2021-36016/): Adobe Media Encoder FLV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36015](https://insights.sbomify.com/CVE-2021-36015/): Adobe Media Encoder Memory Corruption Could Lead To Remote Code Execution (high 7.8)
- [CVE-2021-36014](https://insights.sbomify.com/CVE-2021-36014/): Adobe Media Encoder MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36013](https://insights.sbomify.com/CVE-2021-36013/): Adobe Media Encoder VOB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36012](https://insights.sbomify.com/CVE-2021-36012/): Magento Commerce Gift Card Business Logic Error (medium 6.5)
- [CVE-2021-36011](https://insights.sbomify.com/CVE-2021-36011/): Adobe Illustrator improper neutralization of special elements used in an OS command (high 8.3)
- [CVE-2021-36010](https://insights.sbomify.com/CVE-2021-36010/): Adobe Illustrator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36009](https://insights.sbomify.com/CVE-2021-36009/): Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-36008](https://insights.sbomify.com/CVE-2021-36008/): Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36007](https://insights.sbomify.com/CVE-2021-36007/): Adobe Prelude MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36006](https://insights.sbomify.com/CVE-2021-36006/): Adobe Photoshop MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36005](https://insights.sbomify.com/CVE-2021-36005/): Adobe Photoshop PSD File Parsing Stack Overflow Vulnerability (high 7.8)
- [CVE-2021-36004](https://insights.sbomify.com/CVE-2021-36004/): Adobe InDesign CoolType out of bounds write vulnerability could lead to arbitrary stack manipulation (high 8.8)
- [CVE-2021-36003](https://insights.sbomify.com/CVE-2021-36003/): Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-36002](https://insights.sbomify.com/CVE-2021-36002/): Privilege escalation in Captivate (medium 5.0)
- [CVE-2021-36001](https://insights.sbomify.com/CVE-2021-36001/): Adobe Character Animator PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-36000](https://insights.sbomify.com/CVE-2021-36000/): Adobe Character Animator Memory Corruption Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2021-3600](https://insights.sbomify.com/CVE-2021-3600/): Memory corruption in linux (high 7.8)
- [CVE-2021-35999](https://insights.sbomify.com/CVE-2021-35999/): Adobe Prelude Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-35997](https://insights.sbomify.com/CVE-2021-35997/): Adobe Premiere Pro Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-35996](https://insights.sbomify.com/CVE-2021-35996/): Adobe After Effects Memory Corruption Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-35995](https://insights.sbomify.com/CVE-2021-35995/): Adobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-35994](https://insights.sbomify.com/CVE-2021-35994/): Adobe After Effects JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-35993](https://insights.sbomify.com/CVE-2021-35993/): Adobe After Effects PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-35992](https://insights.sbomify.com/CVE-2021-35992/): Adobe Bridge PostScript Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-35991](https://insights.sbomify.com/CVE-2021-35991/): Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-35990](https://insights.sbomify.com/CVE-2021-35990/): Adobe Bridge JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3599](https://insights.sbomify.com/CVE-2021-3599/): Other in ThinkPad BIOS (medium 6.7)
- [CVE-2021-35989](https://insights.sbomify.com/CVE-2021-35989/): Adobe Bridge PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-35988](https://insights.sbomify.com/CVE-2021-35988/): Adobe Acrobat Pro DC Out-of-Bounds Read Bug (low 3.3)
- [CVE-2021-35987](https://insights.sbomify.com/CVE-2021-35987/): Adobe Acrobat Pro DC PDFLibTool Out-of-Bound Read (low 3.3)
- [CVE-2021-35986](https://insights.sbomify.com/CVE-2021-35986/): Adobe Acrobat Pro DC getAnnot Type Confusion Information Disclosure Vulnerability (low 3.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/131/