Month report
June 2021
Rolled up 2026-08-09 20:45 from 370,662 CVE records
1,691 CVEs published, -6.4% on the same month last year. 48 rated critical, 0 listed by CISA as exploited. google led with 51; the most common weakness class was CWE-79 (63). google climbed 83 places, the largest move. 11 vendors ranked for the first time.
Published
1,691
+13.2%on the previous month
Critical / high
48 / 271
of the 581 scored
Medium / low
235 / 27
the rest of the scored bands
Added to CISA KEV
0
listed as exploited this month
Public exploit
55
exploit code indexed publicly
Scanner template
0
0% of the month
Publication to KEV
How long before CISA listed them
15 published this month and listed since — not the 0 listed during it.
Median days to listing
148
from publication to CISA's date added
Listed within 7 days
0%
of the 15
Listed within 30 days
0%
of the 15
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | 51 | 2 | 1 | chrome (47) · asylo (3) · bindiff (1) | ↑83 | |||
| 2 | microsoft | 50 | 1 | 7 | 6 | windows 10 version 21h1 (25) · windows 10 version 1809 (24) · windows 10 version 1909 (24) | ↑2 | |
| 3 | ibm | 49 | engineering lifecycle optimization (13) · engineering test management (13) · rational collaborative lifecycle management (13) | ↓1 | ||||
| 4 | samsung mobile | 43 | 5 | 2 | samsung mobile devices (26) · samsung health (2) · samsung internet (2) | · | ||
| 5 | sap se | 40 | 2 | sap 3d visual enterprise viewer (9) · sap internet graphics service (7) · sap netweaver abap server and abap platform enqueue server (5) | ↑6 | |||
| 6 | mozilla | 37 | firefox (27) · thunderbird (18) · firefox esr (11) | · | ||||
| 7 | opentext | 34 | brava desktop (34) | new | ||||
| 8 | qualcomm | 33 | 2 | 1 | snapdragon wired infrastructure and networking (6) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music snapdragon wearables (5) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile snapdragon voice music snapdragon wired infrastructure and networking (4) | ↓1 | ||
| 9 | cisco | 27 | cisco webex meetings (5) · cisco small business 220 series smart plus switches (4) · cisco anyconnect secure mobility client (2) | ↓6 | ||||
| 10 | nvidia | 27 | nvidia jetson tx1 (10) · nvidia jetson agx xavier series jetson xavier nx jetson tx2 series jetson tx2 nx (8) · nvidia jetson tx2 series tx2 nx agx xavier series xavier nx (5) | · | ||||
| 11 | adobe | 24 | magento commerce (5) · animate (4) · after effects (3) | ↑44 | ||||
| 12 | synology | 20 | 4 | diskstation manager dsm (5) · synology photo station (4) · download station (3) | · | |||
| 13 | apache | 19 | 3 | apache http server (8) · apache traffic server (5) · apache pdfbox (2) | ↓3 | |||
| 14 | jenkins project | 16 | jenkins xebialabs xl deploy plugin (4) · jenkins requests plugin plugin (3) · jenkins (2) | ↓6 | ||||
| 15 | canonical | 14 | apport (14) | · | ||||
| 16 | weidm ller | 12 | ie wl t bl ap cl xx (12) · ie wl t vl ap cl xx (12) | · | ||||
| 17 | gitlab | 11 | 1 | 1 | gitlab (11) | ↑2 | ||
| 18 | amd | 10 | amd radeon software (7) · all supported processors (2) · 1st 2nd 3rd gen amd epyc processors (1) | ↑13 | ||||
| 19 | dell | 10 | poweredge bios intel 15g (4) · biosconnect (3) · networker (2) | ↓3 | ||||
| 20 | mcafee | 10 | 2 | mcafee database security dbsec (5) · mcafee agent for windows (2) · mcafee data loss prevention dlp endpoint for windows (1) | ↑7 | |||
| 21 | nextcloud | 10 | security advisories (10) | · | ||||
| 22 | avaya | 8 | avaya aura utility services (3) · avaya aura appliance virtualization platform utilities (2) · aura utility services (1) | · | ||||
| 23 | qnap systems | 8 | qss (2) · qts (2) · quts hero (2) | ↑1 | ||||
| 24 | bosch | 7 | 1 | cpp firmware (5) · b426 firmware (2) · b426 cn b429 cn firmware (1) | · | |||
| 25 | gallagher | 7 | 2 | command centre (7) | · | |||
| 26 | phoenix contact | 7 | fl nat (3) · fl switch (3) · automation worx software suite (1) | · | ||||
| 27 | shopware | 7 | 1 | platform (5) · shopware (2) | new | |||
| 28 | contiki ng | 6 | contiki ng (6) | new | ||||
| 29 | fortinet | 6 | 1 | fortinet fortiai (1) · fortinet fortios (1) · fortinet fortipresence (1) | ↑50 | |||
| 30 | ec cube co | 5 | ec cube (2) · ec cube business form output plugin for ec cube 3 0 series (1) · ec cube category contents plugin for ec cube 3 0 series (1) | ↑41 | ||||
| 31 | siemens | 5 | simcenter femap 2020 2 (2) · simcenter femap 2021 1 (2) · jt2go (1) | ↓25 | ||||
| 32 | xen | 5 | xen (5) | new | ||||
| 33 | fidelis cybersecurity | 4 | 3 | fidelis deception (4) · fidelis network (4) | new | |||
| 34 | linux | 4 | 1 | linux kernel (3) · linux (1) | ↓14 | |||
| 35 | opensuse | 4 | factory (3) · leap 15 2 (3) · opensuse backports sle 15 sp2 (1) | ↑9 | ||||
| 36 | palo alto networks | 4 | 1 | bridgecrew checkov (1) · cortex xdr agent (1) · cortex xsoar (1) | · | |||
| 37 | ratpack | 4 | 1 | ratpack (4) | new | |||
| 38 | wireapp | 4 | wire ios (2) · restund (1) · wire webapp (1) | new | ||||
| 39 | atlassian | 3 | 1 | jira data center (3) · jira server (3) | ↓17 | |||
| 40 | backstage | 3 | backstage (3) | new | ||||
| 41 | boldthemes | 3 | bello directory listing (3) | new | ||||
| 42 | 3 | hermes (1) · react native (1) · whatsapp business for android (1) | · | |||||
| 43 | johnson controls | 3 | exacqvision enterprise manager (1) · exacqvision web service (1) · metasys (1) | · | ||||
| 44 | suse | 3 | 1 | suse manager server 4 0 (2) · factory (1) · leap 15 2 (1) | · | |||
| 45 | the eclipse foundation | 3 | 2 | eclipse jetty (2) · eclipse birt (1) | · | |||
| 46 | tianocore | 3 | edk ii (3) | new | ||||
| 47 | auth0 | 2 | lock (1) · nextjs auth0 (1) | · | ||||
| 48 | automattic | 2 | jetpack wp security backup speed growth (1) · wp super cache (1) | ↑13 | ||||
| 49 | ayecode | 2 | location manager (1) · wordpress payments plugin getpaid (1) | new | ||||
| 50 | buffalo | 2 | wsr 1166dhp3 and wsr 1166dhp4 (2) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2021-06 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-79631 critical—
- 2CWE-787610 critical↑6
- 3CWE-20274 critical↑1
- 4CWE-125260 critical↓2
- 5CWE-200251 critical↑4
- 6CWE-400230 critical↑4
- 7CWE-89184 critical↑4
- 8CWE-119141 critical↓1
- 9CWE-122144 critical↑27
- 10CWE-287132 critical↑16
- 1CWE-416131 critical↓6
- 2CWE-78133 critical↑4
- 3CWE-22121 critical↑12
- 4CWE-61120 critical·
- 5CWE-284110 critical↑3
- 6CWE-59110 critical↑47
- 7CWE-863100 critical↑4
- 8CWE-12081 critical↑5
- 9CWE-28582 critical↓5
- 10CWE-43480 critical—
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.