CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2021-22940
High (7.5). EPSS 14% chance of exploitation in the next 30 days.
Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
Severity
- EPSS
- 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- netapp:nextgen_api
- nodejs:node.js
- oracle:graalvm
- oracle:jd_edwards_enterpriseone_tools
- oracle:peoplesoft_enterprise_peopletools
- siemens:sinec_infrastructure_network_services