← Back

Debian Linux

debian_linux

Vendor: Debian • 10,013 CVEs

CVEs (10,013)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-37992
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37991
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
7.5 HIGH· v3
5.1 MEDIUM· v2
Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37990
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app.
CVE-2021-37989
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Blink in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to abuse content security policy via a crafted HTML page.
CVE-2021-37988
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to engage in specific gestures to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37987
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37986
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37985
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37984
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Heap buffer overflow in PDFium in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37983
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Dev Tools in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37982
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37981
2Debian
Google
2Chrome
Debian Linux
Jun 17, 2026
Nov 2, 2021
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-37980
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Nov 2, 2021
N/A· v4
7.4 HIGH· v3
4.3 MEDIUM· v2
Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows.
CVE-2021-37979
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37978
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-37977
3Debian
FedoraprojectGoogle
3Chrome
Debian LinuxFedora
Jun 17, 2026
Nov 2, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-3903
3Debian
FedoraprojectVim
3Debian Linux
FedoraVim
Jun 17, 2026
Oct 27, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-25219
6Debian
FedoraprojectIsc+3 more
15Bind
Cloud BackupDebian Linux+12 more
Jun 17, 2026
Oct 27, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development b...Show more
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.Show less
CVE-2021-41183
7Debian
DrupalFedoraproject+4 more
29Agile Plm
Agile Product Lifecycle ManagementApplication Express+26 more
Aug 25, 2026
Oct 26, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fi...Show more
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.Show less
CVE-2021-41182
7Debian
DrupalFedoraproject+4 more
30Agile Plm
Agile Product Lifecycle ManagementApplication Express+27 more
Aug 25, 2026
Oct 26, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixe...Show more
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.Show less