# CVEs published 2021-03-11

120 CVEs were published on March 11, 2021: 7 critical, 68 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2020-36278](https://cve.now/CVE-2020-36278.md): Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c. (no CVSS)
- [CVE-2021-28143](https://cve.now/CVE-2021-28143.md): /jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools). (no CVSS)
- [CVE-2020-24983](https://cve.now/CVE-2020-24983.md): An issue was discovered in Quadbase EspressReports ES 7 Update 9. (no CVSS)
- [CVE-2016-20009](https://cve.now/CVE-2016-20009.md): A DNS client stack-based buffer overflow in ipdnsc\_decode\_name() affects Wind River VxWorks 6.5 through 7. (no CVSS)
- [CVE-2021-28154](https://cve.now/CVE-2021-28154.md): Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. (no CVSS)
- [CVE-2020-24984](https://cve.now/CVE-2020-24984.md): An issue was discovered in Quadbase EspressReports ES 7 Update 9. (no CVSS)
- [CVE-2021-28153](https://cve.now/CVE-2021-28153.md): An issue was discovered in GNOME GLib before 2.66.8. (no CVSS)
- [CVE-2021-22709](https://cve.now/CVE-2021-22709.md): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (no CVSS, Interactive Graphical SCADA System (IGSS) Definition (Def.e…)
- [CVE-2021-22710](https://cve.now/CVE-2021-22710.md): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (no CVSS, Interactive Graphical SCADA System (IGSS) Definition (Def.e…)
- [CVE-2021-22712](https://cve.now/CVE-2021-22712.md): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (no CVSS, Interactive Graphical SCADA System (IGSS) Definition (Def.e…)
- [CVE-2020-36277](https://cve.now/CVE-2020-36277.md): Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c. (no CVSS)
- [CVE-2021-22711](https://cve.now/CVE-2021-22711.md): A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (no CVSS, Interactive Graphical SCADA System (IGSS) Definition (Def.e…)
- [CVE-2021-22713](https://cve.now/CVE-2021-22713.md): A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION76 (CVSS 7.5, PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION…)
- [CVE-2021-22714](https://cve.now/CVE-2021-22714.md): A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION (no CVSS, PowerLogic ION7400, PM8000 and ION9000)
- [CVE-2021-20261](https://cve.now/CVE-2021-20261.md): A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. (no CVSS, kernel)
- [CVE-2020-29045](https://cve.now/CVE-2020-29045.md): The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize opera (no CVSS)
- [CVE-2020-14989](https://cve.now/CVE-2020-14989.md): An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. (no CVSS)
- [CVE-2020-14988](https://cve.now/CVE-2020-14988.md): An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. (no CVSS)
- [CVE-2020-14987](https://cve.now/CVE-2020-14987.md): An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. (no CVSS)
- [CVE-2021-28141](https://cve.now/CVE-2021-28141.md): An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. (no CVSS)
- [CVE-2021-28088](https://cve.now/CVE-2021-28088.md): Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web (no CVSS, impresscms/impresscms)
- [CVE-2021-27679](https://cve.now/CVE-2021-27679.md): Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2021-27678](https://cve.now/CVE-2021-27678.md): Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2021-27677](https://cve.now/CVE-2021-27677.md): Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2021-26776](https://cve.now/CVE-2021-26776.md): CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name. (no CVSS)
- [CVE-2021-28144](https://cve.now/CVE-2021-28144.md): prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root co (no CVSS)
- [CVE-2021-27077](https://cve.now/CVE-2021-27077.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-27076](https://cve.now/CVE-2021-27076.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Business Productivity Servers 2010 Service Pac… +2)
- [CVE-2021-27075](https://cve.now/CVE-2021-27075.md): Azure Virtual Machine Information Disclosure Vulnerability (CVSS 6.8, Microsoft Azure Container Instance · Microsoft Azure Kub… +2)
- [CVE-2021-27074](https://cve.now/CVE-2021-27074.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 6.2, Microsoft Azure Sphere)
- [CVE-2021-27070](https://cve.now/CVE-2021-27070.md): Windows 10 Update Assistant Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2021-27066](https://cve.now/CVE-2021-27066.md): Windows Admin Center Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft Windows Admin Center)
- [CVE-2021-27063](https://cve.now/CVE-2021-27063.md): Windows DNS Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +2)
- [CVE-2021-27062](https://cve.now/CVE-2021-27062.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-27061](https://cve.now/CVE-2021-27061.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-27060](https://cve.now/CVE-2021-27060.md): Visual Studio Code Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code)
- [CVE-2021-27059](https://cve.now/CVE-2021-27059.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.6, KEV, Microsoft Office 2010 Service Pack · Microsoft Office 20… +1)
- [CVE-2021-27058](https://cve.now/CVE-2021-27058.md): Microsoft Office ClickToRun Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise)
- [CVE-2021-27057](https://cve.now/CVE-2021-27057.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel 2010… +5)
- [CVE-2021-27056](https://cve.now/CVE-2021-27056.md): Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2021-27055](https://cve.now/CVE-2021-27055.md): Microsoft Visio Security Feature Bypass Vulnerability (CVSS 7.0, Microsoft 365 Apps for Enterprise · Microsoft Office +3)
- [CVE-2021-27080](https://cve.now/CVE-2021-27080.md): Azure Sphere Unsigned Code Execution Vulnerability (CVSS 9.3, Microsoft Azure Sphere)
- [CVE-2021-27081](https://cve.now/CVE-2021-27081.md): Visual Studio Code ESLint Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code ESLint extension)
- [CVE-2021-27082](https://cve.now/CVE-2021-27082.md): Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Quantum Development Kit for Visual Studio Code)
- [CVE-2021-27083](https://cve.now/CVE-2021-27083.md): Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code Remote - Containers Extension)
- [CVE-2021-27084](https://cve.now/CVE-2021-27084.md): Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code - Java Extension Pack)
- [CVE-2021-27085](https://cve.now/CVE-2021-27085.md): Internet Explorer Remote Code Execution Vulnerability (CVSS 8.8, KEV, Microsoft Internet Explorer)
- [CVE-2021-27054](https://cve.now/CVE-2021-27054.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel 2010… +5)
- [CVE-2021-27053](https://cve.now/CVE-2021-27053.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Excel 2010… +3)
- [CVE-2021-27052](https://cve.now/CVE-2021-27052.md): Microsoft SharePoint Server Information Disclosure Vulnerability (CVSS 5.3, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2021-27051](https://cve.now/CVE-2021-27051.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-27050](https://cve.now/CVE-2021-27050.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-27049](https://cve.now/CVE-2021-27049.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-27048](https://cve.now/CVE-2021-27048.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-27047](https://cve.now/CVE-2021-27047.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-26902](https://cve.now/CVE-2021-26902.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-26901](https://cve.now/CVE-2021-26901.md): Windows Event Tracing Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26900](https://cve.now/CVE-2021-26900.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26899](https://cve.now/CVE-2021-26899.md): Windows UPnP Device Host Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26898](https://cve.now/CVE-2021-26898.md): Windows Event Tracing Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26897](https://cve.now/CVE-2021-26897.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +2)
- [CVE-2021-26896](https://cve.now/CVE-2021-26896.md): Windows DNS Server Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +2)
- [CVE-2021-26895](https://cve.now/CVE-2021-26895.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +2)
- [CVE-2021-26894](https://cve.now/CVE-2021-26894.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +2)
- [CVE-2021-26893](https://cve.now/CVE-2021-26893.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +2)
- [CVE-2021-26892](https://cve.now/CVE-2021-26892.md): Windows Extensible Firmware Interface Security Feature Bypass Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2021-26891](https://cve.now/CVE-2021-26891.md): Windows Container Execution Agent Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26890](https://cve.now/CVE-2021-26890.md): Application Virtualization Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26889](https://cve.now/CVE-2021-26889.md): Windows Update Stack Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26887](https://cve.now/CVE-2021-26887.md): Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26886](https://cve.now/CVE-2021-26886.md): User Profile Service Denial of Service Vulnerability (CVSS 6.1, Microsoft Windows)
- [CVE-2021-26885](https://cve.now/CVE-2021-26885.md): Windows WalletService Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26884](https://cve.now/CVE-2021-26884.md): Windows Media Photo Codec Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2021-26882](https://cve.now/CVE-2021-26882.md): Remote Access API Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26881](https://cve.now/CVE-2021-26881.md): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2021-26880](https://cve.now/CVE-2021-26880.md): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26879](https://cve.now/CVE-2021-26879.md): Windows Network Address Translation (NAT) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2021-26878](https://cve.now/CVE-2021-26878.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26877](https://cve.now/CVE-2021-26877.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server 2008 R2 Service Pack · Microsof… +2)
- [CVE-2021-26876](https://cve.now/CVE-2021-26876.md): OpenType Font Parsing Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2021-26875](https://cve.now/CVE-2021-26875.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26874](https://cve.now/CVE-2021-26874.md): Windows Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26873](https://cve.now/CVE-2021-26873.md): Windows User Profile Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2021-26871](https://cve.now/CVE-2021-26871.md): Windows WalletService Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26872](https://cve.now/CVE-2021-26872.md): Windows Event Tracing Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26870](https://cve.now/CVE-2021-26870.md): Windows Projected File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26869](https://cve.now/CVE-2021-26869.md): Windows ActiveX Installer Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2021-26868](https://cve.now/CVE-2021-26868.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26867](https://cve.now/CVE-2021-26867.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 9.9, Microsoft Windows)
- [CVE-2021-26866](https://cve.now/CVE-2021-26866.md): Windows Update Service Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2021-26865](https://cve.now/CVE-2021-26865.md): Windows Container Execution Agent Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2021-26864](https://cve.now/CVE-2021-26864.md): Windows Virtual Registry Provider Elevation of Privilege Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2021-26863](https://cve.now/CVE-2021-26863.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2021-26862](https://cve.now/CVE-2021-26862.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2021-26861](https://cve.now/CVE-2021-26861.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26860](https://cve.now/CVE-2021-26860.md): Windows App-V Overlay Filter Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-26859](https://cve.now/CVE-2021-26859.md): Microsoft Power BI Information Disclosure Vulnerability (CVSS 7.7, Microsoft Power BI Report Server)
- [CVE-2021-20336](https://cve.now/CVE-2021-20336.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Tivoli Netcool/OMNIbus\_GUI)
- [CVE-2020-5025](https://cve.now/CVE-2020-5025.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, (CVSS 8.4, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2020-5024](https://cve.now/CVE-2020-5024.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to (CVSS 7.5, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2020-4976](https://cve.now/CVE-2020-4976.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to read and write (CVSS 5.1, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2021-26411](https://cve.now/CVE-2021-26411.md): Internet Explorer Memory Corruption Vulnerability (CVSS 8.8, KEV, Microsoft Internet Explorer · Microsoft Edge)
- [CVE-2021-24110](https://cve.now/CVE-2021-24110.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-24108](https://cve.now/CVE-2021-24108.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office 201… +2)
- [CVE-2021-24107](https://cve.now/CVE-2021-24107.md): Windows Event Tracing Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2021-24104](https://cve.now/CVE-2021-24104.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 4.6, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2021-24095](https://cve.now/CVE-2021-24095.md): DirectX Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2021-24090](https://cve.now/CVE-2021-24090.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-24089](https://cve.now/CVE-2021-24089.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2021-1729](https://cve.now/CVE-2021-1729.md): Windows Update Stack Setup Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2021-28132](https://cve.now/CVE-2021-28132.md): LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support secti (no CVSS)
- [CVE-2021-21363](https://cve.now/CVE-2021-21363.md): Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory (CVSS 5.3, swagger-api swagger-codegen · io.swagger:swagger-codegen)
- [CVE-2021-21364](https://cve.now/CVE-2021-21364.md): Generated Code Contains Local Information Disclosure Vulnerability (CVSS 5.3, swagger-api swagger-codegen · io.swagger:swagger-codegen)
- [CVE-2021-21378](https://cve.now/CVE-2021-21378.md): JWT authentication bypass with unknown issuer token (CVSS 8.2, envoyproxy envoy)
- [CVE-2020-1900](https://cve.now/CVE-2020-1900.md): When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting (no CVSS, Facebook HHVM)
- [CVE-2020-1899](https://cve.now/CVE-2020-1899.md): The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. (no CVSS, Facebook HHVM)
- [CVE-2020-1898](https://cve.now/CVE-2020-1898.md): The fb\_unserialize function did not impose a depth limit for nested deserialization. (no CVSS, Facebook HHVM)
- [CVE-2021-28134](https://cve.now/CVE-2021-28134.md): Clipper before 1.0.5 allows remote command execution. (no CVSS)
- [CVE-2021-27919](https://cve.now/CVE-2021-27919.md): archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a (no CVSS, stdlib)
- [CVE-2021-21381](https://cve.now/CVE-2021-21381.md): Sandbox escape via special tokens in .desktop file (CVSS 7.1, flatpak)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-03-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.