onyx --cves cve-2021-22940
CVE-2021-22940
- score
- <0.1
- cvss
- 7.5
- epss
- 13.9%
- published
- 2021-08-16
- kev added
- —
- first seen
Node.js before 16.6.1, 14.17.5, and 12.22.5 contain a use after free vulnerability caused by improper memory management, letting attackers exploit memory corruption to alter process behavior, exploit requires attacker to execute malicious code.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 9
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://security.gentoo.org/glsa/202401-02
- https://nodejs.org/en/blog/vulnerability/aug-2021-security-releases/
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://hackerone.com/reports/1238162
- https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://security.netapp.com/advisory/ntap-20210923-0001/