CVE-2021-4229

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-912CWE-829

Affected software

VendorProductVersions
unspecifiedua-parser-js0.7.29; 0.8.0; 1.0.0

References

Timeline

Published
May 24, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-422917.5Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-422927.8Microsoft Excel Security Feature Bypass VulnerabilityCVE-2021-422936.5Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege VulnerabilityCVE-2021-422947.2Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-422955.5Visual Basic for Applications Information Disclosure VulnerabilityCVE-2021-422967.8Microsoft Word Remote Code Execution VulnerabilityCVE-2021-422975.0Windows 10 Update Assistant Elevation of Privilege VulnerabilityCVE-2021-422987.8Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-422995.6Microsoft Surface Pro 3 Security Feature Bypass VulnerabilityCVE-2021-42307.5A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL CVE-2021-423006.0Azure Sphere Tampering VulnerabilityCVE-2021-423013.3Azure RTOS Information Disclosure Vulnerability
CVE-2021-4229: High severity, CVSS 8.8 | Vulnix