CVE Tools
Sign in
month report

June 2021

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

June 2021 closed with 1,985 published CVEs. 177 criticals, сообщество свободного программного обеспечения led volume, mostly via debian gnu/linux. Biggest breakout: intel at ×15.6 their 12-month median. Top weakness class — CWE-79 (198 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
1,985
— MoM— YoY
Severity mix
177 / 772
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
7.4%
147 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
1726.3
n=147
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
148
n=15
Detection gap

KEV pressure, no Nuclei coverage

June 2021 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in June 2021

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation416Use After Free89SQL Injection434Unrestricted File Upload119Memory Buffer Bounds400Resource Consumption22Path Traversalсообщество свободного программного обеспечения14369432466106google311393951ао «нппкт»234125242ооо «русбитех-астра»2225123451fedoraproject1124251134ао «концерн вниинс»1622213debian11313233ао «ивк»521611intel526221google inc931251microsoft corp221microsoft11

Most discussed CVEs — June 2021

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения·
    260 CVE24 critCVSS 7.1
    KEV 5Nuclei 23PoC 71
    debian gnu/linux (235) · linux (16) · libslirp (4)
  • 2google↑3
    171 CVE9 critCVSS 7.6
    KEV 3PoC 18
    android (119) · chrome (47) · google chrome (46)
  • 3ао "нппкт"·
    128 CVE5 critCVSS 7.2
    KEV 2Nuclei 10PoC 25
    осон основа оnyx (128)
  • 4ооо «русбитех-астра»·
    128 CVE5 critCVSS 7.0
    KEV 2Nuclei 9PoC 27
    astra linux special edition (128) · astra linux special edition для «эльбрус» (38) · astra linux common edition (4)
  • 5fedoraproject↑4
    109 CVE7 critCVSS 7.3
    KEV 2Nuclei 9PoC 25
    fedora (109)
  • 6ао «концерн вниинс»↑4
    106 CVE3 critCVSS 7.3
    KEV 2Nuclei 9PoC 21
    ос он «стрелец» (106)
  • 7redhat·
    72 CVE1 critCVSS 6.2
    Nuclei 5PoC 7
    red hat enterprise linux (34) · enterprise linux (12) · openshift container platform (5)
  • 8debian·
    71 CVE4 critCVSS 6.6
    Nuclei 8PoC 11
    debian linux (71)
  • 9ао «ивк»↑9
    71 CVE1 critCVSS 7.1
    KEV 2PoC 11
    альт 8 сп (67) · альт сп 10 (4)
  • 10intel↑66
    70 CVE1 critCVSS 7.2
    ×15.6PoC 1
    jhl7040 thunderbolt 3 retimer firmware (9) · jhl6240 thunderbolt 3 firmware (9) · jhl7340 thunderbolt 3 firmware (9)
  • 11microsoft↑3
    56 CVE1 critCVSS 7.1
    KEV 7PoC 10
    windows 10 21h1 (25) · windows 10 version 21h1 (25) · windows 10 20h2 (25)
  • 12ibm↓1
    49 CVE1 critCVSS 5.9
    engineering lifecycle optimization - publishing (13) · rational collaborative lifecycle management (13) · engineering lifecycle optimization (13)
  • 13huawei↑51
    48 CVE9 critCVSS 7.0
    ×7.4
    emui (32) · magic ui (31) · ese620x vess firmware (4)
  • 14maven↓1
    45 CVE3 critCVSS 6.2
    Nuclei 2PoC 4
    com.xebialabs.deployit.ci:deployit-plugin (4) · org.jenkins-ci.plugins:requests (3) · org.jboss.resteasy:resteasy-bom (2)
  • 15packagist↑17
    44 CVE7 critCVSS 6.7
    Nuclei 5PoC 16
    shopware/platform (10) · magento/community-edition (5) · shopware/core (5)
  • 16canonical↑1
    43 CVECVSS 7.2
    PoC 8
    ubuntu (29) · apport (14) · ubuntu linux (12)
  • 17novell inc.↑29
    43 CVE1 critCVSS 7.0
    KEV 1Nuclei 4PoC 10
    opensuse leap (37) · suse linux enterprise server (21) · suse linux enterprise server for sap applications (14)
  • 18samsung mobile—
    43 CVE5 critCVSS 6.2
    NEWKEV 2PoC 5
    samsung mobile devices (26) · samsung health (2) · samsung notes (2)
  • 19sap↑47
    40 CVE1 critCVSS 6.5
    PoC 2
    3d visual enterprise viewer (9) · netweaver as internet graphics server (7) · netweaver as abap (7)
  • 20sap se↑47
    40 CVE1 critCVSS 6.2
    PoC 2
    sap 3d visual enterprise viewer (9) · sap internet graphics service (7) · sap netweaver abap server and abap platform (enqueue server) (5)
  • 21unknown↑3
    40 CVE2 critCVSS 6.6
    Nuclei 40PoC 21
    simple 301 redirects by betterlinks (5) · the plus addons for elementor page builder (3) · autoptimize (3)
  • 22mozilla—
    39 CVE1 critCVSS 6.9
    PoC 1
    firefox (30) · thunderbird (19) · firefox esr (12)
  • 23netapp↓7
    39 CVE3 critCVSS 6.7
    Nuclei 2PoC 3
    cloud backup (16) · solidfire bios (9) · hci compute node bios (9)
  • 24ооо «ред софт»↓9
    38 CVECVSS 7.1
    PoC 5
    ред ос (38)
  • 25npm↓6
    36 CVE6 critCVSS 7.3
    Nuclei 2PoC 5
    tenvoy (2) · @backstage/techdocs-common (2) · @auth0/nextjs-auth0 (1)
  • 26opentext—
    34 CVECVSS 7.4
    NEW
    brava! desktop (34) · brava\! desktop (33) · brava\! (1)
  • 27oracle↑20
    33 CVE2 critCVSS 6.5
    Nuclei 10PoC 2
    zfs storage appliance kit (11) · instantis enterprisetrack (9) · enterprise manager ops center (9)
  • 28qualcomm↑5
    33 CVE6 critCVSS 8.0
    KEV 1
    wsa8810 firmware (33) · wcd9340 firmware (31) · wsa8815 firmware (27)
  • 29qualcomm, inc.↑5
    33 CVE6 critCVSS 8.0
    KEV 1
    snapdragon wired infrastructure and networking (6) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables (5) · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking (4)
  • 30siemens↓8
    33 CVE3 critCVSS 7.2
    PoC 1
    jt2go (9) · teamcenter visualization (9) · simatic ipc547g firmware (8)
  • 31cisco↓19
    27 CVECVSS 6.6
    PoC 27
    cisco webex meetings (7) · webex meetings server (5) · sg220-26 firmware (4)
  • 32nvidia—
    27 CVECVSS 6.2
    ×13.5
    jetson linux (26) · nvidia jetson tx1 (10) · nvidia jetson agx xavier series, jetson xavier nx, jetson tx2 series, jetson tx2 nx (8)
  • 33adobe↑132
    26 CVECVSS 6.9
    animate (6) · magento commerce (5) · magento open source (5)
  • 34pypi↓32
    26 CVE3 critCVSS 6.9
    Nuclei 1PoC 2
    pillow (6) · zope (3) · datasette (2)
  • 35fedora project↑2
    22 CVECVSS 7.0
    KEV 1Nuclei 1PoC 5
    fedora (22)
  • 36apache↑15
    21 CVE4 critCVSS 7.4
    Nuclei 7
    http server (8) · traffic server (5) · pdfbox (2)
  • 37apache software foundation↑15
    21 CVE5 critCVSS 7.5
    ×3.0Nuclei 7
    apache http server (8) · http server (7) · traffic server (5)
  • 38schneider-electric↓2
    21 CVE4 critCVSS 8.0
    interactive graphical scada system (13) · powerlogic egx100 firmware (4) · powerlogic egx300 firmware (4)
  • 39jerryscript—
    20 CVE5 critCVSS 7.9
    NEWPoC 11
    jerryscript (20)
  • 40samsung electronics↑70
    20 CVE5 critCVSS 7.9
    NEW×4.0PoC 11
    iot.js (20)
  • 41synology—
    20 CVE4 critCVSS 7.6
    NEW
    diskstation manager (7) · diskstation manager (dsm) (5) · diskstation manager unified controller (5)
  • 42samsung↑90
    19 CVECVSS 6.7
    ×4.8KEV 2
    internet (3) · notes (2) · android (2)
  • 43go↓14
    18 CVE1 critCVSS 7.0
    helm.sh/helm/v3 (2) · github.com/ory/oathkeeper (2) · github.com/pterodactyl/wings (2)
  • 44ffmpeg↓18
    17 CVECVSS 6.9
    PoC 7
    ffmpeg (17)
  • 45ffmpeg team↓17
    17 CVECVSS 6.9
    PoC 7
    ffmpeg (17)
  • 46nextcloud—
    17 CVE1 critCVSS 5.8
    PoC 5
    security-advisories (10) · nextcloud (6) · nextcloud server (6)
  • 47jenkins↓4
    16 CVE1 critCVSS 5.8
    jenkins xebialabs xl deploy plugin (4) · xebialabs xl deploy (4) · requests (3)
  • 48linux↓27
    16 CVECVSS 7.2
    PoC 5
    linux kernel (16) · linux (1)
  • 49ао «нтц ит роса»↓24
    16 CVE3 critCVSS 7.3
    Nuclei 6
    rosa virtualization (10) · rosa virtualization 3.0 (9) · роса хром (5)
  • 50ооо "аскон-бизнес-решения"—
    16 CVECVSS 5.3
    NEW
    лоцман:plm (16)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79198·
2CWE-787169·
3CWE-12569·
4CWE-2069·
5CWE-41669·
6CWE-8965↑2
7CWE-43445↑10
8CWE-11943↑2
9CWE-40038↑5
10CWE-2236↑2
11CWE-20033↑2
12CWE-19032↑8
13CWE-7831↓2
14CWE-86229↑12
15CWE-86329↑4
16CWE-28726·
17CWE-12025↓2
18CWE-35225↓9
19CWE-36223—
20CWE-26920↑1

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems538 CVE
    135 crit341 KEV38 vendorsCVSS 7.8
    debian gnu/linux (235) · fedora (131) · astra linux special edition (128)
  • OSS Libraries330 CVE
    49 crit93 vendorsCVSS 9.8
    ffmpeg (34) · jerryscript (20) · drawings sdk (8)
  • Enterprise Software325 CVE
    49 crit64 vendorsCVSS 8.4
    cloud backup (16) · collaborative lifecycle management (13) · engineering lifecycle management (13)
  • Mobile Apps244 CVE
    28 crit7 KEV9 vendorsCVSS 7.9
    android (128) · chrome (47) · google chrome (46)
  • Web & CMS Plugins220 CVE
    55 crit119 vendorsCVSS 7.4
    http server (15) · traffic server (10) · white shark systems (9)
  • Hardware Firmware168 CVE
    1,684 crit399 KEV20 vendorsCVSS 9.8
    jetson linux (26) · nvidia jetson tx1 (10) · dsl5320 thunderbolt 2 firmware (9)
  • ICS / OT / IoT122 CVE
    49 crit3 KEV32 vendorsCVSS 8.2
    interactive graphical scada system (14) · powerlogic egx100 firmware (4) · powerlogic egx300 firmware (4)
  • Cloud & SaaS94 CVE
    23 crit31 vendorsCVSS 7.3
    qemu (8) · xen (7) · rabbitmq (6)
  • Consumer Software90 CVE
    4 crit25 vendorsCVSS 8.8
    animate (10) · magento commerce (10) · autocad (8)
  • Networking Infrastructure87 CVE
    5 crit32 vendorsCVSS 7.6
    cisco webex meetings (7) · cisco webex meetings server (5) · webex meetings server (5)
  • Security Products84 CVE
    28 crit39 vendorsCVSS 8.2
    binary ninja (4) · nginx controller (4) · cortex xsoar (3)
  • DevTools & CI50 CVE
    4 crit2 KEV17 vendorsCVSS 6.8
    jenkins (4) · jenkins xebialabs xl deploy plugin (4) · xebialabs xl deploy (4)
  • Databases48 CVE
    6 crit18 vendorsCVSS 7.7
    zfs storage appliance kit (11) · enterprise manager ops center (9) · instantis enterprisetrack (9)
  • Communications33 CVE
    6 crit22 vendorsCVSS 8.1
    laiketui (2) · matrix-appservice-bridge (2) · restund (2)
  • AI / ML3 CVE
    1 vendorsCVSS 6.7
    \@backstage\/plugin-techdocs (1) · \@backstage\/techdocs-common (1) · backstage (1)
  • Unclassified83 CVE
    149 crit57 vendorsCVSS 8.5
    mcafee database security (dbsec) (5) · imagegear (4) · crestbridge (3)
Weakness × Sector

Which weaknesses hit which solution categories in June 2021

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation416Use After Free89SQL Injection434Unrestricted File Upload119Memory Buffer Bounds400Resource Consumption22Path TraversalOperating Systems116925205734111811OSS Libraries352698103531510Web & CMS Plugins8818331511210Enterprise Software363391022021213Hardware Firmware4331714122931Consumer Software12211112262135ICS / OT / IoT1525139612442Networking Infrastructure89811561Security Products1184124132Cloud & SaaS5112151