https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-44543.htmlhttps://patchthecve.com/cve/CVE-2021-44543.htmlWed, 17 Jun 2026 04:12:32 +0000MEDIUM 6.1: An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.https://patchthecve.com/cve/CVE-2021-44542.htmlhttps://patchthecve.com/cve/CVE-2021-44542.htmlWed, 17 Jun 2026 04:12:32 +0000HIGH 7.5: A memory leak vulnerability was found in Privoxy when handling errors.https://patchthecve.com/cve/CVE-2021-44541.htmlhttps://patchthecve.com/cve/CVE-2021-44541.htmlWed, 17 Jun 2026 04:12:32 +0000HIGH 7.5: A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.https://patchthecve.com/cve/CVE-2021-44540.htmlhttps://patchthecve.com/cve/CVE-2021-44540.htmlWed, 17 Jun 2026 04:12:32 +0000HIGH 7.5: A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.https://patchthecve.com/cve/CVE-2021-20209.htmlhttps://patchthecve.com/cve/CVE-2021-20209.htmlWed, 17 Jun 2026 03:33:28 +0000HIGH 7.5: A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.https://patchthecve.com/cve/CVE-2021-20217.htmlhttps://patchthecve.com/cve/CVE-2021-20217.htmlWed, 17 Jun 2026 03:33:29 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system availability.https://patchthecve.com/cve/CVE-2021-20216.htmlhttps://patchthecve.com/cve/CVE-2021-20216.htmlWed, 17 Jun 2026 03:33:29 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability.https://patchthecve.com/cve/CVE-2021-20215.htmlhttps://patchthecve.com/cve/CVE-2021-20215.htmlWed, 17 Jun 2026 03:33:29 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system crash.https://patchthecve.com/cve/CVE-2021-20214.htmlhttps://patchthecve.com/cve/CVE-2021-20214.htmlWed, 17 Jun 2026 03:33:29 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash.https://patchthecve.com/cve/CVE-2021-20213.htmlhttps://patchthecve.com/cve/CVE-2021-20213.htmlWed, 17 Jun 2026 03:33:28 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed.https://patchthecve.com/cve/CVE-2021-20212.htmlhttps://patchthecve.com/cve/CVE-2021-20212.htmlWed, 17 Jun 2026 03:33:28 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error leading to a system crash.https://patchthecve.com/cve/CVE-2021-20211.htmlhttps://patchthecve.com/cve/CVE-2021-20211.htmlWed, 17 Jun 2026 03:33:28 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash.https://patchthecve.com/cve/CVE-2021-20210.htmlhttps://patchthecve.com/cve/CVE-2021-20210.htmlWed, 17 Jun 2026 03:33:28 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a system crash.https://patchthecve.com/cve/CVE-2020-35502.htmlhttps://patchthecve.com/cve/CVE-2020-35502.htmlWed, 17 Jun 2026 03:13:49 +0000HIGH 7.5: A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash.https://patchthecve.com/cve/CVE-2021-20276.htmlhttps://patchthecve.com/cve/CVE-2021-20276.htmlWed, 17 Jun 2026 03:33:35 +0000HIGH 7.5: A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service.https://patchthecve.com/cve/CVE-2021-20275.htmlhttps://patchthecve.com/cve/CVE-2021-20275.htmlWed, 17 Jun 2026 03:33:35 +0000HIGH 7.5: A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service.https://patchthecve.com/cve/CVE-2021-20274.htmlhttps://patchthecve.com/cve/CVE-2021-20274.htmlWed, 17 Jun 2026 03:33:35 +0000HIGH 7.5: A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves.https://patchthecve.com/cve/CVE-2021-20273.htmlhttps://patchthecve.com/cve/CVE-2021-20273.htmlWed, 17 Jun 2026 03:33:35 +0000HIGH 7.5: A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off.https://patchthecve.com/cve/CVE-2021-20272.htmlhttps://patchthecve.com/cve/CVE-2021-20272.htmlWed, 17 Jun 2026 03:33:35 +0000HIGH 7.5: A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash.