August 2021 · Band 1
Exploited in the wild
22 CVEs · 22 exploited
Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.
- exploited in the wild
- 22
Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.
- Atlassian Jira Limited - Local File Inclusion
- Confluence Server - Remote Code Execution
- Atlassian Confluence Server - Local File Inclusion
- RealTek AP Router SDK - Arbitrary Command Injection
- XStream 1.4.18 - Remote Code Execution
- RealTek Jungle SDK - Arbitrary Command Injection
- Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection
- OctoberCMS - Account Takeover
- An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7…
- Windows LSA Spoofing Vulnerability
- Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running…
- Windows Update Medic Service Elevation of Privilege Vulnerability
- Windows User Profile Service Elevation of Privilege Vulnerability
- A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tv…
- A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web conte…
- Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Windows Event Tracing Elevation of Privilege Vulnerability
- An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Proces…
- An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application ma…
- A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catali…
- A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11…
- A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with ker…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP