Security Vulnerabilities
- CVEs Published In 2021
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
Windows SMB Information Disclosure Vulnerability
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
Windows SMB Elevation of Privilege Vulnerability
Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated attacker could utilize API keys belonging to higher privileged users.
Visual Studio Elevation of Privilege Vulnerability
Windows Scripting Engine Memory Corruption Vulnerability
Visual Studio Code Spoofing Vulnerability
A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.
Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.