Exploited Vulnerabilities DailyCVEs from 2021 known to be exploited
Entries216
Ransomware-linked61
Avg. lag0.9 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2021-3199 | ONLYOFFICE Docs | 2026-10-08 | 8.2% | Unknown |
| CVE-2021-23758 | Ajax.NET Professional Ajax.NET Professional | 2026-08-26 | 82.5% | Unknown |
| CVE-2021-27137 | DD-WRT DD-WRT | 2026-07-21 | 3.9% | Unknown |
| CVE-2021-22054 | Omnissa Workspace One UEM | 2026-03-09 | 99.6% | Unknown |
| CVE-2021-30952 | Apple Multiple Products | 2026-03-05 | 6.9% | Unknown |
| CVE-2021-22681 | Rockwell Multiple Products | 2026-03-05 | 63.6% | Unknown |
| CVE-2021-22175 | GitLab GitLab | 2026-02-18 | 53.3% | Unknown |
| CVE-2021-39935 | GitLab Community and Enterprise Editions | 2026-02-03 | 36.1% | Unknown |
| CVE-2021-26828 | OpenPLC ScadaBR | 2025-12-03 | 39.3% | Unknown |
| CVE-2021-26829 | OpenPLC ScadaBR | 2025-11-28 | 48.0% | Unknown |
| CVE-2021-43798 | Grafana Labs Grafana | 2025-10-09 | 88.5% | Unknown |
| CVE-2021-43226 | Microsoft Windows | 2025-10-06 | 3.2% | Known |
| CVE-2021-22555 | Linux Kernel | 2025-10-06 | 78.6% | Unknown |
| CVE-2021-21311 | Adminer Adminer | 2025-09-29 | 98.4% | Unknown |
| CVE-2021-32030 | ASUS Routers | 2025-06-02 | 99.3% | Unknown |
| CVE-2021-20035 | SonicWall SMA100 Appliances | 2025-04-16 | 4.1% | Unknown |
| CVE-2021-44207 | Acclaim Systems USAHERDS | 2024-12-23 | 17.5% | Unknown |
| CVE-2021-40407 | Reolink RLC-410W IP Camera | 2024-12-18 | 47.6% | Unknown |
| CVE-2021-41277 | Metabase Metabase | 2024-11-12 | 97.1% | Unknown |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 2024-11-12 | 99.9% | Unknown |
| CVE-2021-20124 | DrayTek VigorConnect | 2024-09-03 | 96.3% | Unknown |
| CVE-2021-20123 | DrayTek VigorConnect | 2024-09-03 | 90.2% | Unknown |
| CVE-2021-33045 | Dahua IP Camera Firmware | 2024-08-21 | 99.5% | Unknown |
| CVE-2021-33044 | Dahua IP Camera Firmware | 2024-08-21 | 99.9% | Unknown |
| CVE-2021-31196 | Microsoft Exchange Server | 2024-08-21 | 54.0% | Unknown |
| CVE-2021-40655 | D-Link DIR-605 Router | 2024-05-16 | 86.6% | Unknown |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | 99.1% | Known |
| CVE-2021-36380 | Sunhillo SureLine | 2024-03-05 | 97.6% | Unknown |
| CVE-2021-3129 | Laravel Ignition | 2023-09-18 | 99.9% | Known |
| CVE-2021-29256 | Arm Mali Graphics Processing Unit (GPU) | 2023-07-07 | 2.9% | Unknown |
| CVE-2021-25489 | Samsung Mobile Devices | 2023-06-29 | 0.5% | Unknown |
| CVE-2021-25487 | Samsung Mobile Devices | 2023-06-29 | 0.6% | Unknown |
| CVE-2021-25395 | Samsung Mobile Devices | 2023-06-29 | 0.3% | Unknown |
| CVE-2021-25394 | Samsung Mobile Devices | 2023-06-29 | 0.4% | Unknown |
| CVE-2021-25372 | Samsung Mobile Devices | 2023-06-29 | 0.8% | Unknown |
| CVE-2021-25371 | Samsung Mobile Devices | 2023-06-29 | 0.8% | Unknown |
| CVE-2021-44026 | Roundcube Roundcube Webmail | 2023-06-22 | 69.8% | Unknown |
| CVE-2021-3560 | Red Hat Polkit | 2023-05-12 | 23.7% | Unknown |
| CVE-2021-45046 | Apache Log4j2 | 2023-05-01 | 99.9% | Known |
| CVE-2021-27878 | Veritas Backup Exec Agent | 2023-04-07 | 23.9% | Known |
| CVE-2021-27877 | Veritas Backup Exec Agent | 2023-04-07 | 64.9% | Known |
| CVE-2021-27876 | Veritas Backup Exec Agent | 2023-04-07 | 13.5% | Known |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS | 2023-03-30 | 5.2% | Unknown |
| CVE-2021-39144 | XStream XStream | 2023-03-10 | 98.1% | Unknown |
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | 96.2% | Unknown |
| CVE-2021-25370 | Samsung Mobile Devices | 2022-11-08 | 0.8% | Unknown |
| CVE-2021-25369 | Samsung Mobile Devices | 2022-11-08 | 1.0% | Unknown |
| CVE-2021-25337 | Samsung Mobile Devices | 2022-11-08 | 2.8% | Unknown |
| CVE-2021-3493 | Linux Kernel | 2022-10-20 | 49.1% | Unknown |
| CVE-2021-39226 | Grafana Labs Grafana | 2022-08-25 | 99.9% | Unknown |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 | 2022-08-25 | 76.4% | Unknown |
| CVE-2021-31010 | Apple iOS, macOS, watchOS | 2022-08-25 | 3.6% | Unknown |
| CVE-2021-4034 | Red Hat Polkit | 2022-06-27 | 94.3% | Known |
| CVE-2021-30983 | Apple iOS and iPadOS | 2022-06-27 | 2.9% | Unknown |
| CVE-2021-30533 | Google Chromium PopupBlocker | 2022-06-27 | 16.7% | Unknown |
| CVE-2021-38163 | SAP NetWeaver | 2022-06-09 | 36.8% | Unknown |
| CVE-2021-30883 | Apple Multiple Products | 2022-05-23 | 14.7% | Unknown |
| CVE-2021-1048 | Android Kernel | 2022-05-23 | 1.0% | Unknown |
| CVE-2021-0920 | Android Kernel | 2022-05-23 | 0.8% | Unknown |
| CVE-2021-1789 | Apple Multiple Products | 2022-05-04 | 13.9% | Unknown |
| CVE-2021-41357 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2021-40450 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2021-42287 | Microsoft Active Directory | 2022-04-11 | 77.1% | Known |
| CVE-2021-42278 | Microsoft Active Directory | 2022-04-11 | 73.2% | Known |
| CVE-2021-39793 | Google Pixel | 2022-04-11 | 0.6% | Unknown |
| CVE-2021-27852 | Checkbox Checkbox Survey | 2022-04-11 | 30.2% | Unknown |
| CVE-2021-22600 | Linux Kernel | 2022-04-11 | 6.5% | Unknown |
| CVE-2021-3156 | Sudo Sudo | 2022-04-06 | 99.9% | Unknown |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack | 2022-04-06 | 99.8% | Unknown |
| CVE-2021-45382 | D-Link Multiple Routers | 2022-04-04 | 97.8% | Unknown |
| CVE-2021-34484 | Microsoft Windows | 2022-03-31 | 21.8% | Unknown |
| CVE-2021-28799 | QNAP Network Attached Storage (NAS) | 2022-03-31 | 78.2% | Known |
| CVE-2021-21551 | Dell dbutil Driver | 2022-03-31 | 79.2% | Unknown |
| CVE-2021-38646 | Microsoft Office | 2022-03-28 | 7.9% | Known |
| CVE-2021-34486 | Microsoft Windows | 2022-03-28 | 9.2% | Unknown |
| CVE-2021-26085 | Atlassian Confluence Server | 2022-03-28 | 99.9% | Known |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) | 2022-03-28 | 30.0% | Known |
| CVE-2021-42237 | Sitecore XP | 2022-03-25 | 97.5% | Known |
| CVE-2021-22941 | Citrix ShareFile | 2022-03-25 | 53.5% | Known |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | 2022-03-07 | 88.0% | Unknown |
| CVE-2021-41379 | Microsoft Windows | 2022-03-03 | 19.4% | Known |
| CVE-2021-36934 | Microsoft Windows | 2022-02-10 | 67.2% | Unknown |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | 2022-01-28 | 99.9% | Known |
| CVE-2021-35247 | SolarWinds Serv-U | 2022-01-21 | 3.4% | Unknown |
| CVE-2021-40870 | Aviatrix Aviatrix Controller | 2022-01-18 | 93.0% | Unknown |
| CVE-2021-33766 | Microsoft Exchange Server | 2022-01-18 | 98.1% | Unknown |
| CVE-2021-32648 | October CMS October CMS | 2022-01-18 | 90.4% | Unknown |
| CVE-2021-25298 | Nagios Nagios XI | 2022-01-18 | 73.6% | Unknown |
| CVE-2021-25297 | Nagios Nagios XI | 2022-01-18 | 56.6% | Unknown |
| CVE-2021-25296 | Nagios Nagios XI | 2022-01-18 | 71.9% | Unknown |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel | 2022-01-18 | 61.0% | Unknown |
| CVE-2021-21975 | VMware vRealize Operations Manager API | 2022-01-18 | 78.0% | Known |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | 2022-01-18 | 90.6% | Unknown |
| CVE-2021-36260 | Hikvision Security cameras web server | 2022-01-10 | 99.8% | Unknown |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | 2022-01-10 | 39.8% | Unknown |
| CVE-2021-22017 | VMware vCenter Server | 2022-01-10 | 49.1% | Unknown |
| CVE-2021-43890 | Microsoft Windows | 2021-12-15 | 11.2% | Known |
| CVE-2021-4102 | Google Chromium V8 | 2021-12-15 | 7.8% | Unknown |
| CVE-2021-44515 | Zoho Desktop Central | 2021-12-10 | 99.8% | Unknown |
| CVE-2021-44228 | Apache Log4j2 | 2021-12-10 | 99.9% | Known |
| CVE-2021-44168 | Fortinet FortiOS | 2021-12-10 | 0.8% | Unknown |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | 2021-12-10 | 99.8% | Unknown |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 2021-12-01 | 93.2% | Unknown |
| CVE-2021-40438 | Apache Apache | 2021-12-01 | 99.9% | Known |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | 2021-12-01 | 99.8% | Unknown |
| CVE-2021-42321 | Microsoft Exchange | 2021-11-17 | 91.7% | Known |
| CVE-2021-42292 | Microsoft Office | 2021-11-17 | 43.0% | Unknown |
| CVE-2021-40449 | Microsoft Windows | 2021-11-17 | 74.1% | Known |
| CVE-2021-22204 | Perl Exiftool | 2021-11-17 | 99.9% | Unknown |
| CVE-2021-42258 | BQE BillQuick Web Suite | 2021-11-03 | 74.4% | Known |
| CVE-2021-42013 | Apache HTTP Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-41773 | Apache HTTP Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-40539 | Zoho ManageEngine | 2021-11-03 | 98.9% | Known |
| CVE-2021-40444 | Microsoft MSHTML | 2021-11-03 | 97.4% | Known |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 2.8% | Unknown |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 11.4% | Unknown |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 99.9% | Known |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 2.7% | Unknown |
| CVE-2021-38003 | Google Chromium V8 | 2021-11-03 | 38.5% | Unknown |
| CVE-2021-38000 | Google Chromium Intents | 2021-11-03 | 4.9% | Unknown |
| CVE-2021-37976 | Google Chromium | 2021-11-03 | 19.9% | Unknown |
| CVE-2021-37975 | Google Chromium V8 | 2021-11-03 | 34.8% | Unknown |
| CVE-2021-37973 | Google Chromium Portals | 2021-11-03 | 11.7% | Unknown |
| CVE-2021-36955 | Microsoft Windows | 2021-11-03 | 4.0% | Known |
| CVE-2021-36948 | Microsoft Windows | 2021-11-03 | 23.2% | Unknown |
| CVE-2021-36942 | Microsoft Windows | 2021-11-03 | 66.0% | Known |
| CVE-2021-36742 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | 1.4% | Unknown |
| CVE-2021-36741 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | 4.9% | Unknown |
| CVE-2021-35464 | ForgeRock Access Management (AM) | 2021-11-03 | 99.9% | Known |
| CVE-2021-35395 | Realtek AP-Router SDK | 2021-11-03 | 98.1% | Unknown |
| CVE-2021-35211 | SolarWinds Serv-U | 2021-11-03 | 91.1% | Known |
| CVE-2021-34527 | Microsoft Windows | 2021-11-03 | 99.7% | Known |
| CVE-2021-34523 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-34473 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-34448 | Microsoft Windows | 2021-11-03 | 40.0% | Unknown |
| CVE-2021-33771 | Microsoft Windows | 2021-11-03 | 10.1% | Unknown |
| CVE-2021-33742 | Microsoft Windows | 2021-11-03 | 59.4% | Unknown |
| CVE-2021-33739 | Microsoft Windows | 2021-11-03 | 6.5% | Unknown |
| CVE-2021-31979 | Microsoft Windows | 2021-11-03 | 4.5% | Unknown |
| CVE-2021-31956 | Microsoft Windows | 2021-11-03 | 22.2% | Unknown |
| CVE-2021-31955 | Microsoft Windows | 2021-11-03 | 81.1% | Unknown |
| CVE-2021-31755 | Tenda AC11 Router | 2021-11-03 | 86.5% | Unknown |
| CVE-2021-31207 | Microsoft Exchange Server | 2021-11-03 | 99.7% | Known |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider | 2021-11-03 | 2.6% | Unknown |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider | 2021-11-03 | 2.9% | Unknown |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 4.1% | Unknown |
| CVE-2021-30860 | Apple Multiple Products | 2021-11-03 | 75.9% | Unknown |
| CVE-2021-30858 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 13.3% | Unknown |
| CVE-2021-30807 | Apple Multiple Products | 2021-11-03 | 28.8% | Unknown |
| CVE-2021-30762 | Apple iOS | 2021-11-03 | 10.9% | Unknown |
| CVE-2021-30761 | Apple iOS | 2021-11-03 | 10.5% | Unknown |
| CVE-2021-30713 | Apple macOS | 2021-11-03 | 7.0% | Unknown |
| CVE-2021-30666 | Apple iOS | 2021-11-03 | 2.9% | Unknown |
| CVE-2021-30665 | Apple Multiple Products | 2021-11-03 | 3.7% | Unknown |
| CVE-2021-30663 | Apple Multiple Products | 2021-11-03 | 3.5% | Unknown |
| CVE-2021-30661 | Apple Multiple Products | 2021-11-03 | 4.4% | Unknown |
| CVE-2021-30657 | Apple macOS | 2021-11-03 | 68.5% | Unknown |
| CVE-2021-30633 | Google Chromium Indexed DB API | 2021-11-03 | 33.1% | Unknown |
| CVE-2021-30632 | Google Chromium V8 | 2021-11-03 | 63.1% | Unknown |
| CVE-2021-30563 | Google Chromium V8 | 2021-11-03 | 9.0% | Unknown |
| CVE-2021-30554 | Google Chromium WebGL | 2021-11-03 | 7.3% | Unknown |
| CVE-2021-30551 | Google Chromium V8 | 2021-11-03 | 64.7% | Unknown |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) | 2021-11-03 | 85.7% | Known |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 5.4% | Unknown |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 12.0% | Unknown |
| CVE-2021-28550 | Adobe Acrobat and Reader | 2021-11-03 | 51.8% | Unknown |
| CVE-2021-28310 | Microsoft Win32k | 2021-11-03 | 8.3% | Unknown |
| CVE-2021-27562 | Arm Trusted Firmware | 2021-11-03 | 3.0% | Unknown |
| CVE-2021-27561 | Yealink Device Management | 2021-11-03 | 82.8% | Unknown |
| CVE-2021-27104 | Accellion FTA | 2021-11-03 | 56.6% | Known |
| CVE-2021-27103 | Accellion FTA | 2021-11-03 | 11.4% | Known |
| CVE-2021-27102 | Accellion FTA | 2021-11-03 | 3.6% | Known |
| CVE-2021-27101 | Accellion FTA | 2021-11-03 | 5.9% | Known |
| CVE-2021-27085 | Microsoft Internet Explorer | 2021-11-03 | 5.4% | Unknown |
| CVE-2021-27065 | Microsoft Exchange Server | 2021-11-03 | 99.8% | Known |
| CVE-2021-27059 | Microsoft Office | 2021-11-03 | 6.0% | Unknown |
| CVE-2021-26858 | Microsoft Exchange Server | 2021-11-03 | 93.6% | Known |
| CVE-2021-26857 | Microsoft Exchange Server | 2021-11-03 | 95.7% | Known |
| CVE-2021-26855 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-26411 | Microsoft Internet Explorer | 2021-11-03 | 80.7% | Known |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center | 2021-11-03 | 99.9% | Known |
| CVE-2021-23874 | McAfee McAfee Total Protection (MTP) | 2021-11-03 | 1.0% | Unknown |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management | 2021-11-03 | 99.8% | Known |
| CVE-2021-22900 | Ivanti Pulse Connect Secure | 2021-11-03 | 14.1% | Unknown |
| CVE-2021-22899 | Ivanti Pulse Connect Secure | 2021-11-03 | 22.9% | Unknown |
| CVE-2021-22894 | Ivanti Pulse Connect Secure | 2021-11-03 | 41.2% | Unknown |
| CVE-2021-22893 | Ivanti Pulse Connect Secure | 2021-11-03 | 47.1% | Known |
| CVE-2021-22506 | Micro Focus Micro Focus Access Manager | 2021-11-03 | 25.6% | Unknown |
| CVE-2021-22502 | Micro Focus Operation Bridge Reporter (OBR) | 2021-11-03 | 96.7% | Unknown |
| CVE-2021-22205 | GitLab Community and Enterprise Editions | 2021-11-03 | 99.7% | Known |
| CVE-2021-22005 | VMware vCenter Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-21985 | VMware vCenter Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-21972 | VMware vCenter Server | 2021-11-03 | 99.8% | Known |
| CVE-2021-21224 | Google Chromium V8 | 2021-11-03 | 84.1% | Unknown |
| CVE-2021-21220 | Google Chromium V8 | 2021-11-03 | 70.4% | Unknown |
| CVE-2021-21206 | Google Chromium Blink | 2021-11-03 | 9.3% | Unknown |
| CVE-2021-21193 | Google Chromium Blink | 2021-11-03 | 9.8% | Unknown |
| CVE-2021-21166 | Google Chromium | 2021-11-03 | 24.0% | Unknown |
| CVE-2021-21148 | Google Chromium V8 | 2021-11-03 | 19.9% | Unknown |
| CVE-2021-21017 | Adobe Acrobat and Reader | 2021-11-03 | 86.3% | Unknown |
| CVE-2021-20090 | Arcadyan Buffalo Firmware | 2021-11-03 | 99.9% | Unknown |
| CVE-2021-20023 | SonicWall SonicWall Email Security | 2021-11-03 | 51.6% | Known |
| CVE-2021-20022 | SonicWall SonicWall Email Security | 2021-11-03 | 16.6% | Known |
| CVE-2021-20021 | SonicWall SonicWall Email Security | 2021-11-03 | 88.7% | Known |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 | 2021-11-03 | 40.0% | Known |
| CVE-2021-1906 | Qualcomm Multiple Chipsets | 2021-11-03 | 0.5% | Unknown |
| CVE-2021-1905 | Qualcomm Multiple Chipsets | 2021-11-03 | 1.5% | Unknown |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 7.0% | Unknown |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 7.0% | Unknown |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 7.7% | Unknown |
| CVE-2021-1782 | Apple Multiple Products | 2021-11-03 | 2.2% | Unknown |
| CVE-2021-1732 | Microsoft Win32k | 2021-11-03 | 78.3% | Known |
| CVE-2021-1675 | Microsoft Windows | 2021-11-03 | 85.3% | Known |
| CVE-2021-1647 | Microsoft Defender | 2021-11-03 | 39.3% | Unknown |
| CVE-2021-1498 | Cisco HyperFlex HX | 2021-11-03 | 99.9% | Unknown |
| CVE-2021-1497 | Cisco HyperFlex HX | 2021-11-03 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
216 CVE-2021 vulnerabilities are in KEV; on average they were listed 0.9 years after the CVE year.