CVE-2021-27229

—

CVSS 3.1

8.8 high

EPSS

3%p87

Published

Feb 16, 2021 (Feb 16, 2021)

Modified

Jun 17, 2026

Description

Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.

Vendors: mumble debian
Products: mumble, debian linux
Weakness: CWE-59
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news1 stories

1-Click Hack Found in Popular Desktop Apps — Check If You're Using Them

The Hacker NewsApr 22, 04:09 UTC · Apr 22, 2021Vulnerability CVE-2021-22879 CVE-2021-30245 CVE-2021-25631+3 CVEs

47