# CVEs published 2021-09-03

27 CVEs were published on September 3, 2021: 0 critical, 1 high. Days are UTC.

- [CVE-2021-30624](https://cve.now/CVE-2021-30624.md): Chromium: CVE-2021-30624 Use after free in Autofill (no CVSS, Microsoft Edge)
- [CVE-2021-30623](https://cve.now/CVE-2021-30623.md): Chromium: CVE-2021-30623 Use after free in Bookmarks (no CVSS, Microsoft Edge)
- [CVE-2021-30622](https://cve.now/CVE-2021-30622.md): Chromium: CVE-2021-30622 Use after free in WebApp Installs (no CVSS, Microsoft Edge)
- [CVE-2021-30621](https://cve.now/CVE-2021-30621.md): Chromium: CVE-2021-30621 UI Spoofing in Autofill (no CVSS, Microsoft Edge)
- [CVE-2021-30620](https://cve.now/CVE-2021-30620.md): Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink (no CVSS, Microsoft Edge)
- [CVE-2021-30619](https://cve.now/CVE-2021-30619.md): Chromium: CVE-2021-30619 UI Spoofing in Autofill (no CVSS, Microsoft Edge)
- [CVE-2021-30618](https://cve.now/CVE-2021-30618.md): Chromium: CVE-2021-30618 Inappropriate implementation in DevTools (no CVSS, Microsoft Edge)
- [CVE-2021-30617](https://cve.now/CVE-2021-30617.md): Chromium: CVE-2021-30617 Policy bypass in Blink (no CVSS, Microsoft Edge)
- [CVE-2021-30616](https://cve.now/CVE-2021-30616.md): Chromium: CVE-2021-30616 Use after free in Media (no CVSS, Microsoft Edge)
- [CVE-2021-30615](https://cve.now/CVE-2021-30615.md): Chromium: CVE-2021-30615 Cross-origin data leak in Navigation (no CVSS, Microsoft Edge)
- [CVE-2021-30614](https://cve.now/CVE-2021-30614.md): Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip (no CVSS, Microsoft Edge)
- [CVE-2021-30613](https://cve.now/CVE-2021-30613.md): Chromium: CVE-2021-30613 Use after free in Base internals (no CVSS, Microsoft Edge)
- [CVE-2021-30612](https://cve.now/CVE-2021-30612.md): Chromium: CVE-2021-30612 Use after free in WebRTC (no CVSS, Microsoft Edge)
- [CVE-2021-30611](https://cve.now/CVE-2021-30611.md): Chromium: CVE-2021-30611 Use after free in WebRTC (no CVSS, Microsoft Edge)
- [CVE-2021-30610](https://cve.now/CVE-2021-30610.md): Chromium: CVE-2021-30610 Use after free in Extensions API (no CVSS, Microsoft Edge)
- [CVE-2021-30609](https://cve.now/CVE-2021-30609.md): Chromium: CVE-2021-30609 Use after free in Sign-In (no CVSS, Microsoft Edge)
- [CVE-2021-30608](https://cve.now/CVE-2021-30608.md): Chromium: CVE-2021-30608 Use after free in Web Share (no CVSS, Microsoft Edge)
- [CVE-2021-30607](https://cve.now/CVE-2021-30607.md): Chromium: CVE-2021-30607 Use after free in Permissions (no CVSS, Microsoft Edge)
- [CVE-2021-30606](https://cve.now/CVE-2021-30606.md): Chromium: CVE-2021-30606 Use after free in Blink (no CVSS, Microsoft Edge)
- [CVE-2021-39193](https://cve.now/CVE-2021-39193.md): Transaction validity oversight in pallet-ethereum (CVSS 5.3, paritytech frontier · pallet-ethereum)
- [CVE-2021-40492](https://cve.now/CVE-2021-40492.md): A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaSc (no CVSS)
- [CVE-2021-23437](https://cve.now/CVE-2021-23437.md): Regular Expression Denial of Service (ReDoS) (CVSS 7.5, Pillow)
- [CVE-2021-39192](https://cve.now/CVE-2021-39192.md): Privilege escalation: all users can access Admin-level API keys (CVSS 6.5, TryGhost Ghost · ghost)
- [CVE-2021-40494](https://cve.now/CVE-2021-40494.md): A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system. (no CVSS, lxdui)
- [CVE-2021-40490](https://cve.now/CVE-2021-40490.md): A race condition was discovered in ext4\_write\_inline\_data\_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. (no CVSS)
- [CVE-2021-39191](https://cve.now/CVE-2021-39191.md): URL Redirection to Untrusted Site ('Open Redirect') in mod\_auth\_openidc (CVSS 4.7, zmartzone mod\_auth\_openidc)
- [CVE-2021-40491](https://cve.now/CVE-2021-40491.md): The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server ad (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-09-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.