| CVE-2021-29993 | |
| HTTP Request Smuggling | |
| Improper Restriction of Rendered UI Layers or Frames | |
| CVE-2021-38491 | |
| Improper Restriction of Excessive Authentication Attempts | |
| Use After Free | |
| Use After Free | |
| Origin Validation Error | |
| CVE-2021-38494 | |
| CVE-2021-38499 | |
| Out-of-Bounds | |
| Missing Release of Resource after Effective Lifetime | |
| CVE-2021-29975 | |
| CVE-2021-29981 | |
| Out-of-bounds Write | |
| CVE-2021-29974 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Origin Validation Error | |
| CVE-2021-38510 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Race Condition | |
| CVE-2021-29983 | |
| Exposure of Resource to Wrong Sphere | |
| Incorrect Authorization | |
| Use After Free | |
| CVE-2021-38501 | |
| Use After Free | |
| CVE-2021-38500 | |
| CVE-2021-38492 | |
| Missing Initialization of Resource | |
| Interpretation Conflict | |
| Race Condition | |
| Use After Free | |
| Out-of-bounds Write | |
| Out-of-Bounds | |
| CVE-2021-29984 | |
| Use After Free | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Out-of-Bounds | |
| Externally Controlled Reference to a Resource in Another Sphere | |
| Improper Resource Shutdown or Release | |
| Insufficient Verification of Data Authenticity | |
| Incorrect Authorization | |
| Missing Authorization | |
| Incorrect Resource Transfer Between Spheres | |
| Race Condition | |
| Out-of-Bounds | |
| Out-of-Bounds | |
| Cross-site Scripting (XSS) | |
| CVE-2021-24000 | |
| Exposure of Resource to Wrong Sphere | |
| CVE-2021-23996 | |
| Incorrect Conversion between Numeric Types | |
| Out-of-Bounds | |
| Exposure of Resource to Wrong Sphere | |
| Origin Validation Error | |
| Out-of-Bounds | |
| Out-of-Bounds | |
| Time-of-check Time-of-use (TOCTOU) | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Missing Authorization | |
| CVE-2021-23974 | |
| CVE-2021-23972 | |
| CVE-2021-23971 | |
| Reachable Assertion | |
| Incorrect Calculation | |
| Integer Overflow or Wraparound | |
| Arbitrary Argument Injection | |
| Improper Privilege Management | |
| Insufficient Verification of Data Authenticity | |
| Operation on a Resource after Expiration or Release | |
| Missing Initialization of Resource | |
| Out-of-Bounds | |
| Authentication Bypass | |
| Inadequate Encryption Strength | |
| Out-of-Bounds | |
| CVE-2021-23978 | |
| Information Exposure | |
| Information Exposure | |
| CVE-2021-23969 | |
| Out-of-Bounds | |
| Improper Preservation of Permissions | |
| CVE-2021-23962 | |
| CVE-2021-23961 | |
| Cross-site Scripting (XSS) | |
| Exposure of Resource to Wrong Sphere | |
| CVE-2021-23957 | |
| CVE-2021-23956 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| CVE-2021-23960 | |
| Out-of-Bounds | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Out-of-bounds Write | |
| Open Redirect | |
| CVE-2020-26977 | |
| CVE-2020-26975 | |
| CVE-2020-26976 | |
| Use After Free | |
| Use After Free | |
| CVE-2020-35112 | |
| Out-of-bounds Write | |
| CVE-2020-26978 | |
| CVE-2020-35111 | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Information Exposure | |
| CVE-2020-26973 | |
| CVE-2020-15684 | |
| Origin Validation Error | |
| CVE-2020-15681 | |
| CVE-2020-15680 | |
| Out-of-Bounds | |
| Out-of-bounds Write | |
| CVE-2020-26967 | |
| CVE-2020-26964 | |
| CVE-2020-26963 | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Improper Initialization | |
| Reliance on Cookies without Validation and Integrity Checking | |
| CVE-2020-26954 | |
| Out-of-bounds Write | |
| Out-of-bounds Write | |
| Improper Cross-boundary Removal of Sensitive Data | |
| CVE-2020-26966 | |
| CVE-2020-26961 | |
| Use After Free | |
| Use After Free | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Improper Restriction of Rendered UI Layers or Frames | |
| Use After Free | |
| CVE-2020-16012 | |
| Use After Free | |
| CVE-2020-15683 | |
| Out-of-bounds Write | |
| Buffer Overflow | |
| Release of Invalid Pointer or Reference | |
| Use After Free | |
| Open Redirect | |
| Cross-site Scripting (XSS) | |
| Release of Invalid Pointer or Reference | |
| Unrestricted Upload of File with Dangerous Type | |
| Improper Locking | |
| CVE-2020-15665 | |
| Information Exposure | |
| Release of Invalid Pointer or Reference | |
| Incorrect Authorization | |
| Improper Privilege Management | |
| Information Exposure | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| CVE-2020-6829 | |
| Use After Free | |
| CVE-2020-6514 | |
| Origin Validation Error | |
| CVE-2020-15653 | |
| Loop with Unreachable Exit Condition ('Infinite Loop') | |
| Information Exposure | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Uncontrolled Search Path Element | |
| Improper Check for Unusual or Exceptional Conditions | |
| Out-of-bounds Write | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Improper Input Validation | |
| Out-of-bounds Write | |
| Improper Privilege Management | |
| Session Fixation | |
| Out-of-Bounds | |
| Authentication Bypass | |
| Information Exposure | |
| Authentication Bypass | |
| CVE-2020-6813 | |
| Out-of-Bounds | |
| Information Exposure | |
| Arbitrary Code Injection | |
| CVE-2020-12409 | |
| Out-of-Bounds | |
| Deserialization of Untrusted Data | |
| Improper Input Validation | |
| Improper Input Validation | |
| Out-of-Bounds | |
| Out-of-bounds Write | |
| Incorrect Default Permissions | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Improper Input Validation | |
| Incorrect Default Permissions | |
| Use After Free | |
| Out-of-bounds Write | |
| Uncontrolled Search Path Element | |
| Incorrect Default Permissions | |
| Out-of-bounds Read | |
| Out-of-Bounds | |
| Information Exposure | |
| Use After Free | |
| Insufficient Verification of Data Authenticity | |
| Out-of-bounds Read | |
| Use After Free | |
| Out-of-bounds Read | |
| Use After Free | |
| Arbitrary Code Injection | |
| Information Exposure | |
| Out-of-Bounds | |
| Out-of-Bounds | |
| Use of a Broken or Risky Cryptographic Algorithm | |
| Out-of-bounds Write | |
| Out-of-Bounds | |
| Use After Free | |
| Improper Authentication | |
| Double Free | |
| Out-of-Bounds | |
| Out-of-bounds Read | |
| Use After Free | |
| Use After Free | |
| Improper Certificate Validation | |
| Race Condition | |
| Improper Input Validation | |
| Improper Input Validation | |
| Information Exposure | |
| Arbitrary Code Injection | |
| Out-of-Bounds | |
| Buffer Overflow | |
| Access of Resource Using Incompatible Type ('Type Confusion') | |
| Buffer Overflow | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Origin Validation Error | |
| Race Condition | |
| Cross-site Scripting (XSS) | |
| Use After Free | |
| Out-of-bounds Write | |
| Use After Free | |
| Buffer Overflow | |
| Out-of-bounds Read | |
| Improper Authentication | |
