# CVEs published 2021-12-25

31 CVEs were published on December 25, 2021: 0 critical, 20 high. Days are UTC.

- [CVE-2021-35055](https://cve.now/CVE-2021-35055.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-37560](https://cve.now/CVE-2021-37560.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-37561](https://cve.now/CVE-2021-37561.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-37584](https://cve.now/CVE-2021-37584.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-37563](https://cve.now/CVE-2021-37563.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-32467](https://cve.now/CVE-2021-32467.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-32468](https://cve.now/CVE-2021-32468.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-32469](https://cve.now/CVE-2021-32469.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-37562](https://cve.now/CVE-2021-37562.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (CVSS 8.2)
- [CVE-2021-37566](https://cve.now/CVE-2021-37566.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37569](https://cve.now/CVE-2021-37569.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37568](https://cve.now/CVE-2021-37568.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37583](https://cve.now/CVE-2021-37583.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37571](https://cve.now/CVE-2021-37571.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37567](https://cve.now/CVE-2021-37567.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37565](https://cve.now/CVE-2021-37565.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37564](https://cve.now/CVE-2021-37564.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37570](https://cve.now/CVE-2021-37570.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-37572](https://cve.now/CVE-2021-37572.md): MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (CVSS 8.2)
- [CVE-2021-41788](https://cve.now/CVE-2021-41788.md): MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. (CVSS 6.5)
- [CVE-2021-4166](https://cve.now/CVE-2021-4166.md): Out-of-bounds Read in vim/vim (CVSS 7.1, vim/vim)
- [CVE-2021-4162](https://cve.now/CVE-2021-4162.md): Cross-Site Request Forgery (CSRF) in archivy/archivy (CVSS 4.3, archivy/archivy · archivy)
- [CVE-2021-45484](https://cve.now/CVE-2021-45484.md): In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG. (no CVSS)
- [CVE-2021-45485](https://cve.now/CVE-2021-45485.md): In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output\_core.c has an information leak because of certain use of a has (no CVSS)
- [CVE-2021-45486](https://cve.now/CVE-2021-45486.md): In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small. (no CVSS)
- [CVE-2021-45487](https://cve.now/CVE-2021-45487.md): In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures. (no CVSS)
- [CVE-2021-45488](https://cve.now/CVE-2021-45488.md): In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm. (no CVSS)
- [CVE-2021-45489](https://cve.now/CVE-2021-45489.md): In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG. (no CVSS)
- [CVE-2021-45481](https://cve.now/CVE-2021-45481.md): In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segme (no CVSS)
- [CVE-2021-45482](https://cve.now/CVE-2021-45482.md): In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889. (no CVSS)
- [CVE-2021-45483](https://cve.now/CVE-2021-45483.md): In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.