# Vulnerabilities published in 2021


- [CVE-2021-27064](https://insights.sbomify.com/CVE-2021-27064/): Visual Studio Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-27063](https://insights.sbomify.com/CVE-2021-27063/): Windows DNS Server Denial of Service Vulnerability (high 7.5)
- [CVE-2021-27062](https://insights.sbomify.com/CVE-2021-27062/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27061](https://insights.sbomify.com/CVE-2021-27061/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27060](https://insights.sbomify.com/CVE-2021-27060/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27059](https://insights.sbomify.com/CVE-2021-27059/): Microsoft Office Remote Code Execution (high 7.6, exploited in the wild)
- [CVE-2021-27058](https://insights.sbomify.com/CVE-2021-27058/): Microsoft Office ClickToRun Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27057](https://insights.sbomify.com/CVE-2021-27057/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27056](https://insights.sbomify.com/CVE-2021-27056/): Microsoft PowerPoint Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27055](https://insights.sbomify.com/CVE-2021-27055/): Microsoft Visio Security Feature Bypass Vulnerability (high 7.0)
- [CVE-2021-27054](https://insights.sbomify.com/CVE-2021-27054/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27053](https://insights.sbomify.com/CVE-2021-27053/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27052](https://insights.sbomify.com/CVE-2021-27052/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2021-27051](https://insights.sbomify.com/CVE-2021-27051/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27050](https://insights.sbomify.com/CVE-2021-27050/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27049](https://insights.sbomify.com/CVE-2021-27049/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27048](https://insights.sbomify.com/CVE-2021-27048/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27047](https://insights.sbomify.com/CVE-2021-27047/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-27046](https://insights.sbomify.com/CVE-2021-27046/): Memory corruption in Autodesk Navisworks (high 7.8)
- [CVE-2021-27045](https://insights.sbomify.com/CVE-2021-27045/): Memory corruption in Autodesk Navisworks (high 7.8)
- [CVE-2021-27044](https://insights.sbomify.com/CVE-2021-27044/): Memory corruption in Autodesk FBX Review (high 7.8)
- [CVE-2021-27043](https://insights.sbomify.com/CVE-2021-27043/): Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D (high 7.8)
- [CVE-2021-27042](https://insights.sbomify.com/CVE-2021-27042/): Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D (high 7.8)
- [CVE-2021-27041](https://insights.sbomify.com/CVE-2021-27041/): Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D (high 7.8)
- [CVE-2021-27040](https://insights.sbomify.com/CVE-2021-27040/): Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D (low 3.3)
- [CVE-2021-27039](https://insights.sbomify.com/CVE-2021-27039/): Memory corruption in Autodesk Design Review (high 7.8)
- [CVE-2021-27038](https://insights.sbomify.com/CVE-2021-27038/): Memory corruption in Autodesk Design Review (high 7.8)
- [CVE-2021-27037](https://insights.sbomify.com/CVE-2021-27037/): Use after free in Autodesk Design Review (high 7.8)
- [CVE-2021-27036](https://insights.sbomify.com/CVE-2021-27036/): Memory corruption in Autodesk Design Review (high 7.8)
- [CVE-2021-27035](https://insights.sbomify.com/CVE-2021-27035/): Memory corruption in Autodesk Design Review (high 7.8)
- [CVE-2021-27034](https://insights.sbomify.com/CVE-2021-27034/): Memory corruption in Autodesk Design Review (high 7.8)
- [CVE-2021-27033](https://insights.sbomify.com/CVE-2021-27033/): Double Free File Parsing Vulnerability in Autodesk Design Review (high 8.1)
- [CVE-2021-27032](https://insights.sbomify.com/CVE-2021-27032/): Privilege escalation in Autodesk Licensing Installer (high 7.8)
- [CVE-2021-27031](https://insights.sbomify.com/CVE-2021-27031/): Use after free in Autodesk FBX Review (high 7.8)
- [CVE-2021-27030](https://insights.sbomify.com/CVE-2021-27030/): Path traversal in Autodesk FBX Review (high 7.8)
- [CVE-2021-27029](https://insights.sbomify.com/CVE-2021-27029/): Null dereference in Autodesk FBX Review (medium 5.5)
- [CVE-2021-27028](https://insights.sbomify.com/CVE-2021-27028/): Memory corruption in Autodesk FBX Review (high 7.8)
- [CVE-2021-27027](https://insights.sbomify.com/CVE-2021-27027/): Memory corruption in Autodesk FBX Review (high 7.8)
- [CVE-2021-27026](https://insights.sbomify.com/CVE-2021-27026/): Information disclosure in Puppet Enterprise, Puppet Connect (medium 4.4)
- [CVE-2021-27025](https://insights.sbomify.com/CVE-2021-27025/): Silent Configuration Failure in Puppet Agent (medium 6.5)
- [CVE-2021-27024](https://insights.sbomify.com/CVE-2021-27024/): Privilege escalation in Puppet Continuous Delivery for Puppet Enterprise (CD4PE) (high 8.1)
- [CVE-2021-27023](https://insights.sbomify.com/CVE-2021-27023/): Unsafe HTTP Redirect in Puppet Agent and Puppet Server (critical 9.8)
- [CVE-2021-27022](https://insights.sbomify.com/CVE-2021-27022/): Information disclosure in Puppet Enterprise (medium 4.9)
- [CVE-2021-27021](https://insights.sbomify.com/CVE-2021-27021/): SQL injection in Puppet DB (high 8.8)
- [CVE-2021-27020](https://insights.sbomify.com/CVE-2021-27020/): Code injection in Puppet Enterprise (high 8.8)
- [CVE-2021-27019](https://insights.sbomify.com/CVE-2021-27019/): Information disclosure in PuppetDB, Puppet Enterprise (medium 4.3)
- [CVE-2021-27018](https://insights.sbomify.com/CVE-2021-27018/): Security feature bypass in Puppet Remediate (high 7.5)
- [CVE-2021-27017](https://insights.sbomify.com/CVE-2021-27017/): Deserialization of untrusted data (medium 6.6)
- [CVE-2021-27007](https://insights.sbomify.com/CVE-2021-27007/): Auth bypass in NetApp Virtual Desktop Service (VDS) (critical 9.8)
- [CVE-2021-27006](https://insights.sbomify.com/CVE-2021-27006/): Privilege escalation in StorageGRID (formerly StorageGRID Webscale) (medium 4.4)
- [CVE-2021-27005](https://insights.sbomify.com/CVE-2021-27005/): Denial of service in Clustered Data ONTAP (high 7.5)
- [CVE-2021-27004](https://insights.sbomify.com/CVE-2021-27004/): Information disclosure in System Manager 9.x (medium 5.5)
- [CVE-2021-27003](https://insights.sbomify.com/CVE-2021-27003/): Other in Clustered Data ONTAP (medium 4.7)
- [CVE-2021-27002](https://insights.sbomify.com/CVE-2021-27002/): Information disclosure in Cloud Manager (high 7.5)
- [CVE-2021-27001](https://insights.sbomify.com/CVE-2021-27001/): Security feature bypass in Clustered Data ONTAP (medium 5.5)
- [CVE-2021-26999](https://insights.sbomify.com/CVE-2021-26999/): Information disclosure in NetApp Cloud Manager (medium 4.3)
- [CVE-2021-26998](https://insights.sbomify.com/CVE-2021-26998/): Information disclosure in NetApp Cloud Manager (medium 4.3)
- [CVE-2021-26997](https://insights.sbomify.com/CVE-2021-26997/): Information disclosure in E-Series SANtricity OS Controller Software 11.x (medium 6.5)
- [CVE-2021-26996](https://insights.sbomify.com/CVE-2021-26996/): Information disclosure in E-Series SANtricity OS Controller Software 11.x (high 7.5)
- [CVE-2021-26995](https://insights.sbomify.com/CVE-2021-26995/): Other in E-Series SANtricity OS Controller Software 11.x (high 8.8)
- [CVE-2021-26994](https://insights.sbomify.com/CVE-2021-26994/): Denial of service in Clustered Data ONTAP (medium 6.5)
- [CVE-2021-26993](https://insights.sbomify.com/CVE-2021-26993/): Denial of service in E-Series SANtricity OS Controller Software 11.x (medium 5.3)
- [CVE-2021-26992](https://insights.sbomify.com/CVE-2021-26992/): Denial of service in Cloud Manager (high 7.5)
- [CVE-2021-26991](https://insights.sbomify.com/CVE-2021-26991/): Misconfiguration in Cloud Manager (high 7.5)
- [CVE-2021-26990](https://insights.sbomify.com/CVE-2021-26990/): Missing authorization in Cloud Manager (critical 9.1)
- [CVE-2021-26989](https://insights.sbomify.com/CVE-2021-26989/): Denial of service in Clustered Data ONTAP (medium 6.5)
- [CVE-2021-26988](https://insights.sbomify.com/CVE-2021-26988/): Missing authorization in Clustered Data ONTAP (low 3.5)
- [CVE-2021-26987](https://insights.sbomify.com/CVE-2021-26987/): Supply chain in Element Plug-in for vCenter Server (critical 9.8)
- [CVE-2021-26971](https://insights.sbomify.com/CVE-2021-26971/): Command injection in Aruba AirWave Management Platform (medium 6.3)
- [CVE-2021-26970](https://insights.sbomify.com/CVE-2021-26970/): Command injection in Aruba AirWave Management Platform (medium 6.3)
- [CVE-2021-26969](https://insights.sbomify.com/CVE-2021-26969/): XML external entity in Aruba AirWave Management Platform (medium 6.5)
- [CVE-2021-26968](https://insights.sbomify.com/CVE-2021-26968/): Cross-site scripting in Aruba AirWave Management Platform (medium 4.8)
- [CVE-2021-26967](https://insights.sbomify.com/CVE-2021-26967/): Cross-site scripting in Aruba AirWave Management Platform (medium 6.1)
- [CVE-2021-26966](https://insights.sbomify.com/CVE-2021-26966/): SQL injection in Aruba AirWave Management Platform (medium 6.5)
- [CVE-2021-26965](https://insights.sbomify.com/CVE-2021-26965/): SQL injection in Aruba AirWave Management Platform (medium 6.5)
- [CVE-2021-26964](https://insights.sbomify.com/CVE-2021-26964/): Privilege escalation in Aruba AirWave Management Platform (high 7.1)
- [CVE-2021-26963](https://insights.sbomify.com/CVE-2021-26963/): Command injection in Aruba AirWave Management Platform (high 7.2)
- [CVE-2021-26962](https://insights.sbomify.com/CVE-2021-26962/): Command injection in Aruba AirWave Management Platform (high 7.2)
- [CVE-2021-26961](https://insights.sbomify.com/CVE-2021-26961/): Cross-site request forgery in Aruba AirWave Management Platform (high 8.8)
- [CVE-2021-26960](https://insights.sbomify.com/CVE-2021-26960/): Cross-site request forgery in Aruba AirWave Management Platform (high 8.8)
- [CVE-2021-26958](https://insights.sbomify.com/CVE-2021-26958/): Memory corruption in xcb project:xcb (high 8.8)
- [CVE-2021-26957](https://insights.sbomify.com/CVE-2021-26957/): Memory corruption in xcb project:xcb (critical 9.8)
- [CVE-2021-26956](https://insights.sbomify.com/CVE-2021-26956/): Memory corruption in xcb project:xcb (critical 9.8)
- [CVE-2021-26955](https://insights.sbomify.com/CVE-2021-26955/): Memory corruption in xcb project:xcb (critical 9.8)
- [CVE-2021-26954](https://insights.sbomify.com/CVE-2021-26954/): insert_slice_clone can double drop if Clone panics. (medium 5.3)
- [CVE-2021-26953](https://insights.sbomify.com/CVE-2021-26953/): Read on uninitialized buffer in postscript (high 7.5)
- [CVE-2021-26952](https://insights.sbomify.com/CVE-2021-26952/): Use of Uninitialized Resource in ms3d (high 7.5)
- [CVE-2021-26951](https://insights.sbomify.com/CVE-2021-26951/): Out of bounds write in calamine (critical 9.8)
- [CVE-2021-26950](https://insights.sbomify.com/CVE-2021-26950/): Memory corruption in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products (medium 5.5)
- [CVE-2021-26948](https://insights.sbomify.com/CVE-2021-26948/): Null dereference in htmldoc (high 7.8)
- [CVE-2021-26947](https://insights.sbomify.com/CVE-2021-26947/): Cross-site scripting in Odoo Community (medium 6.5)
- [CVE-2021-26945](https://insights.sbomify.com/CVE-2021-26945/): Integer overflow in OpenEXR (medium 5.5)
- [CVE-2021-26943](https://insights.sbomify.com/CVE-2021-26943/): Memory corruption in asus:ux360ca bios (high 8.2)
- [CVE-2021-26939](https://insights.sbomify.com/CVE-2021-26939/): Information disclosure in henriquedornas:henriquedornas (high 7.5)
- [CVE-2021-26938](https://insights.sbomify.com/CVE-2021-26938/): Cross-site scripting in henriquedornas:henriquedornas (medium 5.4)
- [CVE-2021-26937](https://insights.sbomify.com/CVE-2021-26937/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2021-26936](https://insights.sbomify.com/CVE-2021-26936/): Privilege escalation in replaysorcery project:replaysorcery (high 7.8)
- [CVE-2021-26935](https://insights.sbomify.com/CVE-2021-26935/): SQL injection in wowonder:wowonder (high 7.5)
- [CVE-2021-26934](https://insights.sbomify.com/CVE-2021-26934/): Other in fedoraproject:fedora (high 7.8)
- [CVE-2021-26933](https://insights.sbomify.com/CVE-2021-26933/): Race condition in debian:debian linux (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/194/