Vulnerabilities > Fedoraproject > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-09-03 | CVE-2021-30618 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools | 8.8 |
| 2021-09-03 | CVE-2021-30620 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink | 8.8 |
| 2021-09-03 | CVE-2021-30622 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30622 Use after free in WebApp Installs | 8.8 |
| 2021-09-03 | CVE-2021-30623 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30623 Use after free in Bookmarks | 8.8 |
| 2021-09-03 | CVE-2021-30624 | Use After Free vulnerability in multiple products Chromium: CVE-2021-30624 Use after free in Autofill | 8.8 |
| 2021-09-03 | CVE-2021-23437 | Out-of-bounds Read vulnerability in multiple products The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function. | 7.5 |
| 2021-09-03 | CVE-2021-40490 | Race Condition vulnerability in multiple products A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. | 7.0 |
| 2021-09-01 | CVE-2021-33582 | Algorithmic Complexity vulnerability in multiple products Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. | 7.5 |
| 2021-08-27 | CVE-2021-28697 | Race Condition vulnerability in multiple products grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. | 7.8 |
| 2021-08-27 | CVE-2021-40153 | Path Traversal vulnerability in multiple products squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. | 8.1 |