Skip to content

August 2021 · Band 1

Exploited in the wild

22 CVEs · 22 exploited

Each square is a CVE listed by CISA as exploited. The named ones are the most likely to be exploited again.

exploited in the wild
22

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

  1. Atlassian Jira Limited - Local File InclusionCVE-2021-26086Atlassian · CVSS 5.3 · 100% likely

    CWE-22Atlassian

  2. Confluence Server - Remote Code ExecutionCVE-2021-26084Atlassian · CVSS 9.8 · 100% likely

    CWE-917AtlassianEmber Bear

  3. Atlassian Confluence Server - Local File InclusionCVE-2021-26085Atlassian · CVSS 5.3 · 100% likely

    CWE-425Atlassian

  4. RealTek AP Router SDK - Arbitrary Command InjectionCVE-2021-35394Realtek · CVSS 9.8 · 100% likelycovered by CyberSIXT

    CWE-78Realtek1 article

  5. XStream 1.4.18 - Remote Code ExecutionCVE-2021-39144x-stream · CVSS 8.5 · 98% likely

    CWE-94Xstream

  6. RealTek Jungle SDK - Arbitrary Command InjectionCVE-2021-35395Realtek · CVSS 9.8 · 98% likely

    Realtek

  7. Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command InjectionCVE-2021-36380Sunhillo · CVSS 9.8 · 98% likely

    CWE-78Sunhillo Corporation

  8. OctoberCMS - Account TakeoverCVE-2021-32648octobercms · CVSS 8.2 · 91% likely

    CWE-287Octobercms

  9. An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7…CVE-2021-30860Apple · CVSS 7.8 · 76% likely

    CWE-190Apple

  10. Windows LSA Spoofing VulnerabilityCVE-2021-36942Microsoft · CVSS 7.5 · 66% likely

    Microsoft

  11. Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running…CVE-2021-20028SonicWall · CVSS 9.8 · 30% likely

    CWE-89SonicWall

  12. Windows Update Medic Service Elevation of Privilege VulnerabilityCVE-2021-36948Microsoft · CVSS 7.8 · 23% likely

    Microsoft

  13. Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-34484Microsoft · CVSS 7.8 · 22% likely

    Microsoft

  14. A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tv…CVE-2021-30883Apple · CVSS 7.8 · 15% likely

    CWE-787Apple

  15. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web conte…CVE-2021-30858Apple · CVSS 8.8 · 13% likely

    CWE-416Apple

  16. Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-30563Google · CVSS 8.8 · 9.5% likely

    CWE-843Google

  17. Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-34486Microsoft · CVSS 7.8 · 9.3% likely

    CWE-416Microsoft

  18. An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Proces…CVE-2021-30952Apple · CVSS 8.8 · 7.0% likelycovered by CyberSIXT

    CWE-190Apple

  19. An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application ma…CVE-2021-30900Apple · CVSS 7.8 · 5.2% likely

    CWE-787Apple

  20. A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catali…CVE-2021-30869Apple · CVSS 7.8 · 4.2% likely

    CWE-843Apple

  21. A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11…CVE-2021-31010Apple · CVSS 7.5 · 3.4% likely

    CWE-502Apple

  22. A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with ker…CVE-2021-30983Apple · CVSS 7.8 · 2.9% likely

    CWE-120Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in