# Vulnerabilities published in 2021


- [CVE-2021-34543](https://insights.sbomify.com/CVE-2021-34543/): Missing authorization in bkw:solar-log 500 firmware (high 7.5)
- [CVE-2021-34540](https://insights.sbomify.com/CVE-2021-34540/): Cross-site scripting in advantech:webaccess (medium 6.1)
- [CVE-2021-3454](https://insights.sbomify.com/CVE-2021-3454/): Truncated L2CAP K-frame causes assertion failure (medium 4.3)
- [CVE-2021-34539](https://insights.sbomify.com/CVE-2021-34539/): Code injection in cubecoders:amp (high 7.2)
- [CVE-2021-34538](https://insights.sbomify.com/CVE-2021-34538/): Apache Hive Security vulnerability in Hive with UDFs (high 7.5)
- [CVE-2021-34537](https://insights.sbomify.com/CVE-2021-34537/): Windows Bluetooth Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34536](https://insights.sbomify.com/CVE-2021-34536/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34535](https://insights.sbomify.com/CVE-2021-34535/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34534](https://insights.sbomify.com/CVE-2021-34534/): Windows MSHTML Platform Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2021-34533](https://insights.sbomify.com/CVE-2021-34533/): Windows Graphics Component Font Parsing Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34532](https://insights.sbomify.com/CVE-2021-34532/): ASP.NET Core and Visual Studio Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34530](https://insights.sbomify.com/CVE-2021-34530/): Windows Graphics Component Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3453](https://insights.sbomify.com/CVE-2021-3453/): Security feature bypass in BIOS (medium 6.8)
- [CVE-2021-34529](https://insights.sbomify.com/CVE-2021-34529/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34528](https://insights.sbomify.com/CVE-2021-34528/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34527](https://insights.sbomify.com/CVE-2021-34527/): Microsoft Windows Print Spooler Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-34525](https://insights.sbomify.com/CVE-2021-34525/): Windows DNS Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34524](https://insights.sbomify.com/CVE-2021-34524/): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (high 8.1)
- [CVE-2021-34523](https://insights.sbomify.com/CVE-2021-34523/): Microsoft Exchange Server Privilege Escalation (critical 9.0, exploited in the wild)
- [CVE-2021-34522](https://insights.sbomify.com/CVE-2021-34522/): Microsoft Defender Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34521](https://insights.sbomify.com/CVE-2021-34521/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34520](https://insights.sbomify.com/CVE-2021-34520/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2021-3452](https://insights.sbomify.com/CVE-2021-3452/): Other in ThinkPad BIOS (medium 6.7)
- [CVE-2021-34519](https://insights.sbomify.com/CVE-2021-34519/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2021-34518](https://insights.sbomify.com/CVE-2021-34518/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34517](https://insights.sbomify.com/CVE-2021-34517/): Microsoft SharePoint Server Spoofing Vulnerability (medium 5.3)
- [CVE-2021-34516](https://insights.sbomify.com/CVE-2021-34516/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34514](https://insights.sbomify.com/CVE-2021-34514/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34513](https://insights.sbomify.com/CVE-2021-34513/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34512](https://insights.sbomify.com/CVE-2021-34512/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34511](https://insights.sbomify.com/CVE-2021-34511/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34510](https://insights.sbomify.com/CVE-2021-34510/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-3451](https://insights.sbomify.com/CVE-2021-3451/): Misconfiguration in PCManager (medium 5.5)
- [CVE-2021-34509](https://insights.sbomify.com/CVE-2021-34509/): Storage Spaces Controller Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34508](https://insights.sbomify.com/CVE-2021-34508/): Windows Kernel Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34507](https://insights.sbomify.com/CVE-2021-34507/): Windows Remote Assistance Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-34506](https://insights.sbomify.com/CVE-2021-34506/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 6.1)
- [CVE-2021-34504](https://insights.sbomify.com/CVE-2021-34504/): Windows Address Book Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34503](https://insights.sbomify.com/CVE-2021-34503/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34501](https://insights.sbomify.com/CVE-2021-34501/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34500](https://insights.sbomify.com/CVE-2021-34500/): Windows Kernel Memory Information Disclosure Vulnerability (medium 6.3)
- [CVE-2021-3450](https://insights.sbomify.com/CVE-2021-3450/): CA certificate check bypass with X509_V_FLAG_X509_STRICT (high 7.4)
- [CVE-2021-34499](https://insights.sbomify.com/CVE-2021-34499/): Windows DNS Server Denial of Service Vulnerability (medium 6.5)
- [CVE-2021-34498](https://insights.sbomify.com/CVE-2021-34498/): Windows GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34497](https://insights.sbomify.com/CVE-2021-34497/): Windows MSHTML Platform Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2021-34496](https://insights.sbomify.com/CVE-2021-34496/): Windows GDI Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34494](https://insights.sbomify.com/CVE-2021-34494/): Windows DNS Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34493](https://insights.sbomify.com/CVE-2021-34493/): Windows Partition Management Driver Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2021-34492](https://insights.sbomify.com/CVE-2021-34492/): Windows Certificate Spoofing Vulnerability (high 8.1)
- [CVE-2021-34491](https://insights.sbomify.com/CVE-2021-34491/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34490](https://insights.sbomify.com/CVE-2021-34490/): Windows TCP/IP Driver Denial of Service Vulnerability (high 7.5)
- [CVE-2021-3449](https://insights.sbomify.com/CVE-2021-3449/): NULL pointer deref in signature_algorithms processing (medium 5.9)
- [CVE-2021-34489](https://insights.sbomify.com/CVE-2021-34489/): DirectWrite Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34488](https://insights.sbomify.com/CVE-2021-34488/): Windows Console Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34487](https://insights.sbomify.com/CVE-2021-34487/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-34486](https://insights.sbomify.com/CVE-2021-34486/): Microsoft Windows Event Tracing Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-34485](https://insights.sbomify.com/CVE-2021-34485/): .NET Core and Visual Studio Information Disclosure Vulnerability (medium 5.0)
- [CVE-2021-34484](https://insights.sbomify.com/CVE-2021-34484/): Microsoft Windows User Profile Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-34483](https://insights.sbomify.com/CVE-2021-34483/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34481](https://insights.sbomify.com/CVE-2021-34481/): Windows Print Spooler Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34480](https://insights.sbomify.com/CVE-2021-34480/): Scripting Engine Memory Corruption Vulnerability (medium 6.8)
- [CVE-2021-3448](https://insights.sbomify.com/CVE-2021-3448/): Weak cryptography in dnsmasq (medium 4.0)
- [CVE-2021-34479](https://insights.sbomify.com/CVE-2021-34479/): Microsoft Visual Studio Spoofing Vulnerability (high 7.8)
- [CVE-2021-34478](https://insights.sbomify.com/CVE-2021-34478/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34477](https://insights.sbomify.com/CVE-2021-34477/): Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34476](https://insights.sbomify.com/CVE-2021-34476/): Bowser.sys Denial of Service Vulnerability (high 7.5)
- [CVE-2021-34475](https://insights.sbomify.com/CVE-2021-34475/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (medium 5.4)
- [CVE-2021-34474](https://insights.sbomify.com/CVE-2021-34474/): Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability (high 8.0)
- [CVE-2021-34473](https://insights.sbomify.com/CVE-2021-34473/): Microsoft Exchange Server Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2021-34471](https://insights.sbomify.com/CVE-2021-34471/): Microsoft Defender Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34470](https://insights.sbomify.com/CVE-2021-34470/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2021-3447](https://insights.sbomify.com/CVE-2021-3447/): Information disclosure in ansible (medium 5.5)
- [CVE-2021-34469](https://insights.sbomify.com/CVE-2021-34469/): Microsoft Office Security Feature Bypass Vulnerability (high 8.2)
- [CVE-2021-34468](https://insights.sbomify.com/CVE-2021-34468/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.1)
- [CVE-2021-34467](https://insights.sbomify.com/CVE-2021-34467/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.1)
- [CVE-2021-34466](https://insights.sbomify.com/CVE-2021-34466/): Windows Hello Security Feature Bypass Vulnerability (medium 5.7)
- [CVE-2021-34464](https://insights.sbomify.com/CVE-2021-34464/): Microsoft Defender Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34462](https://insights.sbomify.com/CVE-2021-34462/): Windows AppX Deployment Extensions Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-34461](https://insights.sbomify.com/CVE-2021-34461/): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34460](https://insights.sbomify.com/CVE-2021-34460/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-3446](https://insights.sbomify.com/CVE-2021-3446/): Weak cryptography in libtpms (medium 5.5)
- [CVE-2021-34459](https://insights.sbomify.com/CVE-2021-34459/): Windows AppContainer Elevation Of Privilege Vulnerability (high 7.8)
- [CVE-2021-34458](https://insights.sbomify.com/CVE-2021-34458/): Windows Kernel Remote Code Execution Vulnerability (critical 9.9)
- [CVE-2021-34457](https://insights.sbomify.com/CVE-2021-34457/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34456](https://insights.sbomify.com/CVE-2021-34456/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34455](https://insights.sbomify.com/CVE-2021-34455/): Windows File History Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34454](https://insights.sbomify.com/CVE-2021-34454/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34453](https://insights.sbomify.com/CVE-2021-34453/): Microsoft Exchange Server Denial of Service Vulnerability (high 7.5)
- [CVE-2021-34452](https://insights.sbomify.com/CVE-2021-34452/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34451](https://insights.sbomify.com/CVE-2021-34451/): Microsoft Office Online Server Spoofing Vulnerability (medium 5.3)
- [CVE-2021-34450](https://insights.sbomify.com/CVE-2021-34450/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.5)
- [CVE-2021-3445](https://insights.sbomify.com/CVE-2021-3445/): Security feature bypass in libdnf (high 7.5)
- [CVE-2021-34449](https://insights.sbomify.com/CVE-2021-34449/): Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-34448](https://insights.sbomify.com/CVE-2021-34448/): Microsoft Windows Scripting Engine Memory Corruption (medium 6.8, exploited in the wild)
- [CVE-2021-34447](https://insights.sbomify.com/CVE-2021-34447/): Windows MSHTML Platform Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2021-34446](https://insights.sbomify.com/CVE-2021-34446/): Windows HTML Platforms Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2021-34445](https://insights.sbomify.com/CVE-2021-34445/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-34444](https://insights.sbomify.com/CVE-2021-34444/): Windows DNS Server Denial of Service Vulnerability (medium 6.5)
- [CVE-2021-34442](https://insights.sbomify.com/CVE-2021-34442/): Windows DNS Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34441](https://insights.sbomify.com/CVE-2021-34441/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/142/