CVE-2021-22940CWE-416

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to…

published August 16, 2021

CVSS

—

EPSS

14%

Percentile

96.5

In the wild

Unconfirmed

What it is

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13861 · 96.5th percentile
Weakness: CWE-416 · Use After Free
Published: 2021-08-16T00:00Z

EPSS history

Timeline

16 AUG 00:00Z
Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to…
cvelistv5