Exploited Vulnerabilities DailyVulnerabilities added to KEV in December 2021
Added20
Ransomware-linked4
Vendors15
By vendor
3
3
2
1
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2021-43890 | Microsoft Windows | 2021-12-15 | 11.2% | Known |
| CVE-2021-4102 | Google Chromium V8 | 2021-12-15 | 7.8% | Unknown |
| CVE-2021-44515 | Zoho Desktop Central | 2021-12-10 | 99.8% | Unknown |
| CVE-2021-44228 | Apache Log4j2 | 2021-12-10 | 99.9% | Known |
| CVE-2021-44168 | Fortinet FortiOS | 2021-12-10 | 0.8% | Unknown |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | 2021-12-10 | 99.8% | Unknown |
| CVE-2020-8816 | Pi-hole AdminLTE | 2021-12-10 | 78.1% | Unknown |
| CVE-2020-17463 | Fuel CMS Fuel CMS | 2021-12-10 | 89.6% | Unknown |
| CVE-2019-7238 | Sonatype Nexus Repository Manager | 2021-12-10 | 77.1% | Unknown |
| CVE-2019-13272 | Linux Kernel | 2021-12-10 | 52.1% | Unknown |
| CVE-2019-10758 | MongoDB mongo-express | 2021-12-10 | 84.7% | Unknown |
| CVE-2019-0193 | Apache Solr | 2021-12-10 | 83.5% | Unknown |
| CVE-2017-17562 | Embedthis GoAhead | 2021-12-10 | 96.2% | Unknown |
| CVE-2017-12149 | Red Hat JBoss Application Server | 2021-12-10 | 90.7% | Known |
| CVE-2010-1871 | Red Hat JBoss Seam 2 | 2021-12-10 | 83.3% | Unknown |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 2021-12-01 | 93.2% | Unknown |
| CVE-2021-40438 | Apache Apache | 2021-12-01 | 99.9% | Known |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | 2021-12-01 | 99.8% | Unknown |
| CVE-2020-11261 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2021-12-01 | 1.6% | Unknown |
| CVE-2018-14847 | MikroTik RouterOS | 2021-12-01 | 95.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.