CVE-2021-0012
published 2021-08-11CVE-2021-0012: Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
14.1th percentile
Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially enable denial of service via local access.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | graphics_driver | >= 15.40 < 15.40.47.5166 | 15.40.47.5166 |
| intel | graphics_driver | >= 15.45 < 15.45.33.5164 | 15.45.33.5164 |
| intel | graphics_drivers | >= 27.20 < 27.20.100.9030 | 27.20.100.9030 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-ww4m-wgvm-rv46: Use after free in some Intel(R) Graphics Driver before version 27
ghsa_unreviewed·2022-05-24
CVE-2021-0012 [MEDIUM] CWE-416 GHSA-ww4m-wgvm-rv46: Use after free in some Intel(R) Graphics Driver before version 27
Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allow an authenticated user to potentially enable denial of service via local access.
VMware
VMware Carbon Black App Control update addresses authentication bypass (CVE-2021-21998)
vendor_vmware·2021-06-22·CVSS 9.8
CVE-2021-21998 [CRITICAL] VMware Carbon Black App Control update addresses authentication bypass (CVE-2021-21998)
VMSA-2021-0012: VMware Carbon Black App Control update addresses authentication bypass (CVE-2021-21998)
The VMware Carbon Black App Control management server has an authentication bypass. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.4.
CVEs: CVE-2021-21998
Affected products: VMware Carbon Black
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00508.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00566.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00508.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00566.html
2021-08-11
Published