Month report
August 2021
Rolled up 2026-08-09 20:45 from 370,708 CVE records
2,087 CVEs published, +79.9% on the same month last year. 50 rated critical, 0 listed by CISA as exploited. apple led with 152; the most common weakness class was CWE-79 (137). adobe climbed 58 places, the largest move. 7 vendors ranked for the first time.
Published
2,087
Critical / high
50 / 379
Medium / low
290 / 45
Added to CISA KEV
0
Public exploit
56
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
229.5
Listed within 7 days
0%
Listed within 30 days
0%
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | apple | 152 | 8 | 5 | macos (116) · ios and ipados (89) · watchos (42) | · | ||
| 2 | adobe | 79 | acrobat reader (22) · after effects (16) · animate (8) | ↑58 | ||||
| 3 | tensorflow | 58 | 1 | 1 | tensorflow (58) | · | ||
| 4 | microsoft | 49 | 3 | 4 | 3 | windows server 2019 (26) · windows 10 version 1809 (25) · windows 10 version 2004 (25) | ↓2 | |
| 5 | 46 | 1 | 1 | chrome (45) · asylo (1) | ↑22 | |||
| 6 | huawei | 34 | emui (23) · magic ui (23) · harmonyos (11) | · | ||||
| 7 | ibm | 32 | cloud pak for security (5) · aix (4) · api connect (4) | ↓4 | ||||
| 8 | dell | 31 | 3 | powerscale onefs (15) · integrated dell remote access controller idrac (6) · dell openmanage enterprise (4) | ↓1 | |||
| 9 | cisco | 29 | 4 | 1 | cisco application policy infrastructure controller apic (6) · cisco nx os software (4) · cisco nx os system software in aci mode (4) | ↓3 | ||
| 10 | cybozu | 23 | cybozu garoon (23) | · | ||||
| 11 | foxit | 23 | pdf reader (22) · reader (1) | · | ||||
| 12 | mozilla | 22 | firefox (19) · thunderbird (12) · firefox esr (8) | · | ||||
| 13 | gitlab | 20 | 1 | gitlab (19) · gitlab ee (1) | ↑3 | |||
| 14 | fortinet | 18 | 2 | fortinet fortiportal (6) · fortinet fortisandbox (6) · fortinet fortianalyzer fortimanager (4) | ↓3 | |||
| 15 | x stream | 14 | 1 | 2 | xstream (14) | · | ||
| 16 | siemens | 12 | 1 | solid edge se2021 (3) · jt2go (2) · simatic s7 1200 cpu family incl siplus variants (2) | ↓12 | |||
| 17 | exiv2 | 11 | exiv2 (11) | · | ||||
| 18 | nvidia | 11 | jetson agx xavier series jetson xavier nx jetson tx2 series jetson tx2 nx jetson nano jetson nano 2gb jetson tx1 (6) · shield tv (3) · nvidia jetson agx xavier series jetson xavier nx jetson tx2 series jetson tx2 nx (2) | ↓4 | ||||
| 19 | ays pro | 10 | faq builder ays (1) · image slider by ays responsive slider and carousel (1) · photo gallery by ays responsive image gallery (1) | new | ||||
| 20 | solarwinds | 10 | orion platform (8) · serv u (1) · web help desk (1) | · | ||||
| 21 | apache | 8 | apache airflow (1) · apache http server (1) · apache nifi minifi c (1) | ↓9 | ||||
| 22 | atlassian | 8 | 1 | 3 | 3 | jira data center (6) · jira server (6) · confluence data center (2) | ↑2 | |
| 23 | phoenix contact | 8 | 1 | wha gw f2d2 0 as z2 eth (8) · wha gw f2d2 0 as z2 eth eip (8) | · | |||
| 24 | six apart | 8 | movable type (8) | · | ||||
| 25 | npm | 7 | 1 | node tar (5) · arborist (2) | · | |||
| 26 | xen | 7 | xen (7) | · | ||||
| 27 | akaunting | 6 | akaunting (6) | new | ||||
| 28 | samsung mobile | 6 | samsung mobile devices (2) · smart things (2) · samsung internet (1) | ↓18 | ||||
| 29 | sap se | 6 | 1 | infrabox (1) · kyma (1) · sap fiori client native mobile for android (1) | ↓14 | |||
| 30 | envoyproxy | 5 | envoy (5) | · | ||||
| 31 | f secure | 5 | f secure mobile security (3) · f secure endpoint protection products on windows mac and linux security (2) | · | ||||
| 32 | jenkins project | 5 | jenkins azure ad plugin (1) · jenkins code coverage api plugin (1) · jenkins nested view plugin (1) | · | ||||
| 33 | larvata digital technology co | 5 | flygo (5) | new | ||||
| 34 | mautic | 5 | mautic (5) | · | ||||
| 35 | palo alto networks | 5 | pan os (5) | ↑16 | ||||
| 36 | shopware | 5 | platform (5) | · | ||||
| 37 | discourse | 4 | discourse (4) | ↑5 | ||||
| 38 | dolibarr | 4 | 1 | dolibarr (4) | · | |||
| 39 | fiveai | 4 | 3 | cachet (4) | new | |||
| 40 | lenovo | 4 | 1 | smart camera x3 x5 and c2e firmware (3) · driver management (1) | ↓11 | |||
| 41 | mb connect line | 4 | 1 | mbconnect24 (2) · mbdialup (2) · mymbconnect24 (2) | · | |||
| 42 | ckeditor | 3 | ckeditor4 (3) | · | ||||
| 43 | d link | 3 | 1 | dsl 2750u (2) · dir 825 (1) | ↓17 | |||
| 44 | firefly iii | 3 | firefly iii firefly iii (3) | ↑32 | ||||
| 45 | ledgersmb | 3 | ledgersmb ledgersmb (3) | new | ||||
| 46 | nodejs | 3 | node (3) | ↑3 | ||||
| 47 | pimcore | 3 | pimcore (1) · pimcore adminbundle (1) · pimcore customer data framework (1) | · | ||||
| 48 | sonicdoe | 3 | detect character encoding (2) · ced (1) | new | ||||
| 49 | contao | 2 | contao (2) | · | ||||
| 50 | istio | 2 | 1 | istio (2) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2021-08 that are on the CISA KEV catalog today. The 0 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791372 critical—
- 2CWE-416460 critical↑10
- 3CWE-125430 critical↑6
- 4CWE-89341 critical↑13
- 5CWE-680300 critical↑94
- 6CWE-352270 critical↑5
- 7CWE-502261 critical↑16
- 8CWE-20212 critical↓4
- 9CWE-787190 critical↓6
- 10CWE-476180 critical↑48
- 1CWE-284161 critical↓5
- 2CWE-78163 critical↓7
- 3CWE-200152 critical↓11
- 4CWE-22150 critical↓7
- 5CWE-122141 critical↓5
- 6CWE-434140 critical↑6
- 7CWE-824130 critical·
- 8CWE-94133 critical↑47
- 9CWE-287121 critical↑1
- 10CWE-369120 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.