# Vulnerabilities published in 2021


- [CVE-2021-30695](https://insights.sbomify.com/CVE-2021-30695/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2021-30694](https://insights.sbomify.com/CVE-2021-30694/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2021-30693](https://insights.sbomify.com/CVE-2021-30693/): Other in iOS and iPadOS (high 7.8)
- [CVE-2021-30692](https://insights.sbomify.com/CVE-2021-30692/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2021-30691](https://insights.sbomify.com/CVE-2021-30691/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2021-30690](https://insights.sbomify.com/CVE-2021-30690/): Other in Security Update - Mojave (critical 9.8)
- [CVE-2021-30689](https://insights.sbomify.com/CVE-2021-30689/): Cross-site scripting in iOS and iPadOS (medium 6.1)
- [CVE-2021-30688](https://insights.sbomify.com/CVE-2021-30688/): Path traversal in macOS (high 8.8)
- [CVE-2021-30687](https://insights.sbomify.com/CVE-2021-30687/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2021-30686](https://insights.sbomify.com/CVE-2021-30686/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2021-30685](https://insights.sbomify.com/CVE-2021-30685/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2021-30684](https://insights.sbomify.com/CVE-2021-30684/): Business logic in macOS (high 7.8)
- [CVE-2021-30683](https://insights.sbomify.com/CVE-2021-30683/): Use after free in macOS (high 7.8)
- [CVE-2021-30682](https://insights.sbomify.com/CVE-2021-30682/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2021-30681](https://insights.sbomify.com/CVE-2021-30681/): Privilege escalation in iOS and iPadOS (high 7.8)
- [CVE-2021-30680](https://insights.sbomify.com/CVE-2021-30680/): Security feature bypass in macOS (high 7.8)
- [CVE-2021-30679](https://insights.sbomify.com/CVE-2021-30679/): Privilege escalation in macOS (high 7.8)
- [CVE-2021-30678](https://insights.sbomify.com/CVE-2021-30678/): Business logic in macOS (critical 9.8)
- [CVE-2021-30677](https://insights.sbomify.com/CVE-2021-30677/): Security feature bypass in iOS and iPadOS (high 8.8)
- [CVE-2021-30676](https://insights.sbomify.com/CVE-2021-30676/): Business logic in macOS (high 7.1)
- [CVE-2021-30675](https://insights.sbomify.com/CVE-2021-30675/): Memory corruption in Boot Camp (high 7.8)
- [CVE-2021-30674](https://insights.sbomify.com/CVE-2021-30674/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2021-30673](https://insights.sbomify.com/CVE-2021-30673/): Missing authorization in macOS (medium 5.5)
- [CVE-2021-30672](https://insights.sbomify.com/CVE-2021-30672/): Memory corruption in macOS (high 7.8)
- [CVE-2021-30671](https://insights.sbomify.com/CVE-2021-30671/): Security feature bypass in macOS (low 3.3)
- [CVE-2021-30669](https://insights.sbomify.com/CVE-2021-30669/): Security feature bypass in macOS (medium 5.5)
- [CVE-2021-30668](https://insights.sbomify.com/CVE-2021-30668/): Auth bypass in macOS (medium 4.6)
- [CVE-2021-30667](https://insights.sbomify.com/CVE-2021-30667/): Auth bypass in iOS and iPadOS (medium 5.4)
- [CVE-2021-30666](https://insights.sbomify.com/CVE-2021-30666/): Apple iOS WebKit Buffer Overflow (high 8.8, exploited in the wild)
- [CVE-2021-30665](https://insights.sbomify.com/CVE-2021-30665/): Apple Multiple Products WebKit Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2021-30664](https://insights.sbomify.com/CVE-2021-30664/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2021-30663](https://insights.sbomify.com/CVE-2021-30663/): Apple Multiple Products WebKit Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2021-30662](https://insights.sbomify.com/CVE-2021-30662/): Other in iOS and iPadOS (high 7.3)
- [CVE-2021-30661](https://insights.sbomify.com/CVE-2021-30661/): Apple Multiple Products WebKit Storage Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-30660](https://insights.sbomify.com/CVE-2021-30660/): Memory corruption in iOS and iPadOS (high 7.5)
- [CVE-2021-30659](https://insights.sbomify.com/CVE-2021-30659/): Information disclosure in iOS and iPadOS (medium 6.5)
- [CVE-2021-30658](https://insights.sbomify.com/CVE-2021-30658/): Security feature bypass in macOS (medium 5.5)
- [CVE-2021-30657](https://insights.sbomify.com/CVE-2021-30657/): Apple macOS Unspecified (medium 5.5, exploited in the wild)
- [CVE-2021-30656](https://insights.sbomify.com/CVE-2021-30656/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2021-30655](https://insights.sbomify.com/CVE-2021-30655/): Privilege escalation in macOS (critical 9.8)
- [CVE-2021-30654](https://insights.sbomify.com/CVE-2021-30654/): Information disclosure in GarageBand (medium 5.5)
- [CVE-2021-30653](https://insights.sbomify.com/CVE-2021-30653/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2021-30652](https://insights.sbomify.com/CVE-2021-30652/): Race condition in iOS and iPadOS (high 7.0)
- [CVE-2021-30651](https://insights.sbomify.com/CVE-2021-30651/): Information disclosure in Symantec Messaging Gateway (SMG) (medium 4.9)
- [CVE-2021-30650](https://insights.sbomify.com/CVE-2021-30650/): Cross-site scripting in Layer7 API Management OAuth Toolkit (OTK) (medium 6.1)
- [CVE-2021-30648](https://insights.sbomify.com/CVE-2021-30648/): Auth bypass in Advanced Secure Gateway (ASG) and ProxySG (critical 9.8)
- [CVE-2021-30642](https://insights.sbomify.com/CVE-2021-30642/): Command injection in Symantec Security Analytics (critical 9.8)
- [CVE-2021-30641](https://insights.sbomify.com/CVE-2021-30641/): Unexpected URL matching with 'MergeSlashes OFF' (medium 5.3)
- [CVE-2021-30640](https://insights.sbomify.com/CVE-2021-30640/): Auth weakness in JNDIRealm (medium 6.5)
- [CVE-2021-3064](https://insights.sbomify.com/CVE-2021-3064/): PAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces (critical 9.8)
- [CVE-2021-30639](https://insights.sbomify.com/CVE-2021-30639/): DoS after non-blocking IO error (high 7.5)
- [CVE-2021-30638](https://insights.sbomify.com/CVE-2021-30638/): An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later (high 7.5)
- [CVE-2021-30637](https://insights.sbomify.com/CVE-2021-30637/): Cross-site scripting in htmly:htmly (medium 5.4)
- [CVE-2021-30636](https://insights.sbomify.com/CVE-2021-30636/): Integer overflow in mediatek:linkit software development kit (critical 9.8)
- [CVE-2021-30635](https://insights.sbomify.com/CVE-2021-30635/): Path traversal in sonatype:nexus repository manager (medium 5.3)
- [CVE-2021-30633](https://insights.sbomify.com/CVE-2021-30633/): Google Chromium Indexed DB API Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-30632](https://insights.sbomify.com/CVE-2021-30632/): Google Chromium V8 Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2021-30630](https://insights.sbomify.com/CVE-2021-30630/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-3063](https://insights.sbomify.com/CVE-2021-3063/): PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces (high 7.5)
- [CVE-2021-30629](https://insights.sbomify.com/CVE-2021-30629/): Use after free in Chrome (high 8.8)
- [CVE-2021-30628](https://insights.sbomify.com/CVE-2021-30628/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-30627](https://insights.sbomify.com/CVE-2021-30627/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-30626](https://insights.sbomify.com/CVE-2021-30626/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-30625](https://insights.sbomify.com/CVE-2021-30625/): Use after free in Chrome (high 8.8)
- [CVE-2021-30624](https://insights.sbomify.com/CVE-2021-30624/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30623](https://insights.sbomify.com/CVE-2021-30623/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30622](https://insights.sbomify.com/CVE-2021-30622/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30621](https://insights.sbomify.com/CVE-2021-30621/): Other in Microsoft Edge (Chromium-based) (medium 6.5)
- [CVE-2021-30620](https://insights.sbomify.com/CVE-2021-30620/): Security feature bypass in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-3062](https://insights.sbomify.com/CVE-2021-3062/): PAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to GlobalProtect Users (high 8.1)
- [CVE-2021-30619](https://insights.sbomify.com/CVE-2021-30619/): Other in Microsoft Edge (Chromium-based) (medium 6.5)
- [CVE-2021-30618](https://insights.sbomify.com/CVE-2021-30618/): Other in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30617](https://insights.sbomify.com/CVE-2021-30617/): Security feature bypass in Microsoft Edge (Chromium-based) (medium 6.5)
- [CVE-2021-30616](https://insights.sbomify.com/CVE-2021-30616/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30615](https://insights.sbomify.com/CVE-2021-30615/): Information disclosure in Microsoft Edge (Chromium-based) (medium 6.5)
- [CVE-2021-30614](https://insights.sbomify.com/CVE-2021-30614/): Memory corruption in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30613](https://insights.sbomify.com/CVE-2021-30613/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30612](https://insights.sbomify.com/CVE-2021-30612/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30611](https://insights.sbomify.com/CVE-2021-30611/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30610](https://insights.sbomify.com/CVE-2021-30610/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-3061](https://insights.sbomify.com/CVE-2021-3061/): PAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI) (medium 6.4)
- [CVE-2021-30609](https://insights.sbomify.com/CVE-2021-30609/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30608](https://insights.sbomify.com/CVE-2021-30608/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30607](https://insights.sbomify.com/CVE-2021-30607/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30606](https://insights.sbomify.com/CVE-2021-30606/): Use after free in Microsoft Edge (Chromium-based) (high 8.8)
- [CVE-2021-30605](https://insights.sbomify.com/CVE-2021-30605/): Misconfiguration in Chrome (high 7.8)
- [CVE-2021-30604](https://insights.sbomify.com/CVE-2021-30604/): Use after free in Chrome (high 8.8)
- [CVE-2021-30603](https://insights.sbomify.com/CVE-2021-30603/): Race condition in Chrome (high 7.5)
- [CVE-2021-30602](https://insights.sbomify.com/CVE-2021-30602/): Use after free in Chrome (high 8.8)
- [CVE-2021-30601](https://insights.sbomify.com/CVE-2021-30601/): Use after free in Chrome (high 8.8)
- [CVE-2021-30600](https://insights.sbomify.com/CVE-2021-30600/): Use after free in Chrome (high 8.8)
- [CVE-2021-3060](https://insights.sbomify.com/CVE-2021-3060/): PAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP) (high 8.1)
- [CVE-2021-30599](https://insights.sbomify.com/CVE-2021-30599/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-30598](https://insights.sbomify.com/CVE-2021-30598/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-30597](https://insights.sbomify.com/CVE-2021-30597/): Use after free in Chrome (medium 6.8)
- [CVE-2021-30596](https://insights.sbomify.com/CVE-2021-30596/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-30594](https://insights.sbomify.com/CVE-2021-30594/): Use after free in Chrome (medium 6.8)
- [CVE-2021-30593](https://insights.sbomify.com/CVE-2021-30593/): Memory corruption in Chrome (high 8.1)
- [CVE-2021-30592](https://insights.sbomify.com/CVE-2021-30592/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-30591](https://insights.sbomify.com/CVE-2021-30591/): Use after free in Chrome (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/169/
