CVE-2021-27229: Debian Linux

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.

Affected products

• Debian Debian Linux: version 9.0 only
• Mumble Mumble: before 1.3.4 (fixed in 1.3.4)

Published 2021-02-16. Last modified 2026-06-17.