# Vulnerabilities published in 2021


- [CVE-2021-24107](https://insights.sbomify.com/CVE-2021-24107/): Windows Event Tracing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-24106](https://insights.sbomify.com/CVE-2021-24106/): Windows DirectX Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-24105](https://insights.sbomify.com/CVE-2021-24105/): Package Managers Configurations Remote Code Execution Vulnerability (high 8.4)
- [CVE-2021-24104](https://insights.sbomify.com/CVE-2021-24104/): Microsoft SharePoint Server Spoofing Vulnerability (medium 4.6)
- [CVE-2021-24103](https://insights.sbomify.com/CVE-2021-24103/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-24102](https://insights.sbomify.com/CVE-2021-24102/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-24101](https://insights.sbomify.com/CVE-2021-24101/): Microsoft Dataverse Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-24100](https://insights.sbomify.com/CVE-2021-24100/): Microsoft Edge for Android Information Disclosure Vulnerability (medium 5.0)
- [CVE-2021-2410](https://insights.sbomify.com/CVE-2021-2410/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-24099](https://insights.sbomify.com/CVE-2021-24099/): Skype for Business and Lync Denial of Service Vulnerability (medium 6.5)
- [CVE-2021-24098](https://insights.sbomify.com/CVE-2021-24098/): Windows Console Driver Denial of Service Vulnerability (medium 5.5)
- [CVE-2021-24096](https://insights.sbomify.com/CVE-2021-24096/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-24095](https://insights.sbomify.com/CVE-2021-24095/): DirectX Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-24094](https://insights.sbomify.com/CVE-2021-24094/): Windows TCP/IP Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-24093](https://insights.sbomify.com/CVE-2021-24093/): Windows Graphics Component Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-24092](https://insights.sbomify.com/CVE-2021-24092/): Microsoft Defender Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-24091](https://insights.sbomify.com/CVE-2021-24091/): Windows Camera Codec Pack Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-24090](https://insights.sbomify.com/CVE-2021-24090/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-2409](https://insights.sbomify.com/CVE-2021-2409/): Other in VM VirtualBox (high 8.2)
- [CVE-2021-24089](https://insights.sbomify.com/CVE-2021-24089/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-24088](https://insights.sbomify.com/CVE-2021-24088/): Windows Local Spooler Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-24087](https://insights.sbomify.com/CVE-2021-24087/): Azure IoT CLI extension Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-24086](https://insights.sbomify.com/CVE-2021-24086/): Windows TCP/IP Denial of Service Vulnerability (high 7.5)
- [CVE-2021-24085](https://insights.sbomify.com/CVE-2021-24085/): Microsoft Exchange Server Spoofing Vulnerability (medium 6.5)
- [CVE-2021-24084](https://insights.sbomify.com/CVE-2021-24084/): Windows Mobile Device Management Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-24083](https://insights.sbomify.com/CVE-2021-24083/): Windows Address Book Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-24082](https://insights.sbomify.com/CVE-2021-24082/): Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability (medium 4.3)
- [CVE-2021-24081](https://insights.sbomify.com/CVE-2021-24081/): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-24080](https://insights.sbomify.com/CVE-2021-24080/): Windows Trust Verification API Denial of Service Vulnerability (medium 6.5)
- [CVE-2021-2408](https://insights.sbomify.com/CVE-2021-2408/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2021-24079](https://insights.sbomify.com/CVE-2021-24079/): Windows Backup Engine Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-24078](https://insights.sbomify.com/CVE-2021-24078/): Windows DNS Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-24077](https://insights.sbomify.com/CVE-2021-24077/): Windows Fax Service Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-24076](https://insights.sbomify.com/CVE-2021-24076/): Microsoft Windows VMSwitch Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-24075](https://insights.sbomify.com/CVE-2021-24075/): Microsoft Windows VMSwitch Denial of Service Vulnerability (medium 6.8)
- [CVE-2021-24074](https://insights.sbomify.com/CVE-2021-24074/): Windows TCP/IP Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-24073](https://insights.sbomify.com/CVE-2021-24073/): Skype for Business and Lync Spoofing Vulnerability (medium 6.5)
- [CVE-2021-24072](https://insights.sbomify.com/CVE-2021-24072/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-24071](https://insights.sbomify.com/CVE-2021-24071/): Microsoft SharePoint Information Disclosure Vulnerability (medium 5.3)
- [CVE-2021-24070](https://insights.sbomify.com/CVE-2021-24070/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-2407](https://insights.sbomify.com/CVE-2021-2407/): Information disclosure in PeopleSoft Enterprise PT PeopleTools (medium 5.3)
- [CVE-2021-24069](https://insights.sbomify.com/CVE-2021-24069/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-24068](https://insights.sbomify.com/CVE-2021-24068/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-24067](https://insights.sbomify.com/CVE-2021-24067/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-24066](https://insights.sbomify.com/CVE-2021-24066/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-2406](https://insights.sbomify.com/CVE-2021-2406/): Other in Collaborative Planning (high 8.1)
- [CVE-2021-2405](https://insights.sbomify.com/CVE-2021-2405/): Other in Engineering (high 8.1)
- [CVE-2021-24046](https://insights.sbomify.com/CVE-2021-24046/): Business logic in Ray-Ban® Stories Smart Glasses (medium 5.3)
- [CVE-2021-24045](https://insights.sbomify.com/CVE-2021-24045/): Memory corruption in Hermes (critical 9.8)
- [CVE-2021-24044](https://insights.sbomify.com/CVE-2021-24044/): Access of Resource Using Incompatible Type in Hermes (critical 9.8)
- [CVE-2021-24043](https://insights.sbomify.com/CVE-2021-24043/): Memory corruption in whatsapp:whatsapp (critical 9.1)
- [CVE-2021-24042](https://insights.sbomify.com/CVE-2021-24042/): Memory corruption in WhatsApp Business for Android (critical 9.8)
- [CVE-2021-24041](https://insights.sbomify.com/CVE-2021-24041/): Memory corruption in WhatsApp Business for Android (critical 9.8)
- [CVE-2021-24040](https://insights.sbomify.com/CVE-2021-24040/): Deserialization in ParlAI (critical 9.8)
- [CVE-2021-2404](https://insights.sbomify.com/CVE-2021-2404/): Other in PeopleSoft Enterprise HCM Candidate Gateway (medium 6.5)
- [CVE-2021-24038](https://insights.sbomify.com/CVE-2021-24038/): Privilege escalation in Oculus Desktop (high 7.8)
- [CVE-2021-24037](https://insights.sbomify.com/CVE-2021-24037/): Use After Free in Hermes (critical 9.8)
- [CVE-2021-24036](https://insights.sbomify.com/CVE-2021-24036/): Integer overflow in HHVM (critical 9.8)
- [CVE-2021-24035](https://insights.sbomify.com/CVE-2021-24035/): Path traversal in WhatsApp Business for Android (critical 9.1)
- [CVE-2021-24033](https://insights.sbomify.com/CVE-2021-24033/): react-dev-utils OS Command Injection in function `getProcessForPort` (medium 5.6)
- [CVE-2021-24032](https://insights.sbomify.com/CVE-2021-24032/): Race condition in Zstandard (medium 4.7)
- [CVE-2021-24031](https://insights.sbomify.com/CVE-2021-24031/): Misconfiguration in Zstandard (medium 5.5)
- [CVE-2021-24030](https://insights.sbomify.com/CVE-2021-24030/): Command injection in Facebook Gameroom (critical 9.8)
- [CVE-2021-2403](https://insights.sbomify.com/CVE-2021-2403/): Information disclosure in WebLogic Server (medium 5.3)
- [CVE-2021-24029](https://insights.sbomify.com/CVE-2021-24029/): Denial of service in mvfst (high 7.5)
- [CVE-2021-24028](https://insights.sbomify.com/CVE-2021-24028/): Memory corruption in Facebook Thrift (critical 9.8)
- [CVE-2021-24027](https://insights.sbomify.com/CVE-2021-24027/): Information disclosure in WhatsApp Business for Android (high 7.5)
- [CVE-2021-24026](https://insights.sbomify.com/CVE-2021-24026/): Memory corruption in WhatsApp Business for Android (critical 9.8)
- [CVE-2021-24025](https://insights.sbomify.com/CVE-2021-24025/): Integer overflow in HHVM (critical 9.8)
- [CVE-2021-24024](https://insights.sbomify.com/CVE-2021-24024/): Information disclosure in Fortinet FortiADCManager, FortiADC (medium 4.3)
- [CVE-2021-24023](https://insights.sbomify.com/CVE-2021-24023/): Command injection in Fortinet FortiAI (high 7.8)
- [CVE-2021-24022](https://insights.sbomify.com/CVE-2021-24022/): Memory corruption in Fortinet FortiAnalyzer, FortiManager (medium 6.7)
- [CVE-2021-24021](https://insights.sbomify.com/CVE-2021-24021/): Cross-site scripting in Fortinet FortiAnalyzer (medium 4.3)
- [CVE-2021-24020](https://insights.sbomify.com/CVE-2021-24020/): Weak cryptography in Fortinet FortiMail (high 7.5)
- [CVE-2021-2402](https://insights.sbomify.com/CVE-2021-2402/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-24019](https://insights.sbomify.com/CVE-2021-24019/): Auth bypass in Fortinet FortiClientEMS (high 8.1)
- [CVE-2021-24018](https://insights.sbomify.com/CVE-2021-24018/): Memory corruption in Fortinet FortiOS (medium 4.3)
- [CVE-2021-24017](https://insights.sbomify.com/CVE-2021-24017/): Auth bypass in Fortinet FortiManager (medium 5.4)
- [CVE-2021-24016](https://insights.sbomify.com/CVE-2021-24016/): Code injection in Fortinet FortiManager (low 3.7)
- [CVE-2021-24015](https://insights.sbomify.com/CVE-2021-24015/): Command injection in Fortinet FortiMail (high 7.2)
- [CVE-2021-24014](https://insights.sbomify.com/CVE-2021-24014/): Cross-site scripting in Fortinet FortiSandbox (medium 5.4)
- [CVE-2021-24013](https://insights.sbomify.com/CVE-2021-24013/): Path traversal in Fortinet FortiMail (high 8.8)
- [CVE-2021-24012](https://insights.sbomify.com/CVE-2021-24012/): Security feature bypass in Fortinet FortiOS (medium 6.5)
- [CVE-2021-24011](https://insights.sbomify.com/CVE-2021-24011/): Privilege escalation in Fortinet FortiNAC (medium 6.3)
- [CVE-2021-24010](https://insights.sbomify.com/CVE-2021-24010/): Path traversal in Fortinet FortiSandbox (high 8.1)
- [CVE-2021-2401](https://insights.sbomify.com/CVE-2021-2401/): XML external entity in BI Publisher (formerly XML Publisher) (medium 5.3)
- [CVE-2021-24009](https://insights.sbomify.com/CVE-2021-24009/): Command injection in Fortinet FortiWAN (high 7.2)
- [CVE-2021-24008](https://insights.sbomify.com/CVE-2021-24008/): Information disclosure in FortiDDoS (medium 5.0)
- [CVE-2021-24007](https://insights.sbomify.com/CVE-2021-24007/): SQL injection in Fortinet FortiMail (critical 9.8)
- [CVE-2021-24006](https://insights.sbomify.com/CVE-2021-24006/): Missing authorization in Fortinet FortiManager (medium 6.3)
- [CVE-2021-24005](https://insights.sbomify.com/CVE-2021-24005/): Hardcoded credentials in FortiAuthenticator (medium 4.0)
- [CVE-2021-24002](https://insights.sbomify.com/CVE-2021-24002/): Command injection in Firefox (high 8.8)
- [CVE-2021-24001](https://insights.sbomify.com/CVE-2021-24001/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2021-24000](https://insights.sbomify.com/CVE-2021-24000/): Race condition in Firefox (low 3.1)
- [CVE-2021-2400](https://insights.sbomify.com/CVE-2021-2400/): Information disclosure in BI Publisher (formerly XML Publisher) (high 7.5)
- [CVE-2021-23999](https://insights.sbomify.com/CVE-2021-23999/): Privilege escalation in Firefox (high 8.8)
- [CVE-2021-23998](https://insights.sbomify.com/CVE-2021-23998/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-23997](https://insights.sbomify.com/CVE-2021-23997/): Use after free in Firefox (high 8.8)
- [CVE-2021-23996](https://insights.sbomify.com/CVE-2021-23996/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-23995](https://insights.sbomify.com/CVE-2021-23995/): Use after free in Firefox (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/217/