Month report
November 2021
Rolled up 2026-08-09 20:45 from 382,649 CVE records
1,508 CVEs published, +21% on the same month last year. 44 rated critical, 291 listed by CISA as exploited. microsoft led with 60; the most common weakness class was CWE-79 (127). amd climbed 82 places, the largest move. 11 vendors ranked for the first time.
Published
1,508
Critical / high
44 / 273
Medium / low
295 / 33
Added to CISA KEV
291
Public exploit
67
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
113
Listed within 7 days
45.5%
Listed within 30 days
45.5%
Detection gap
Listed as exploited, no public template
Listed this month
291
With a template
84
No template
207
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 60 | 1 | 5 | 7 | windows server 2019 (27) · windows server version 2004 (27) · windows server version 20h2 (27) | ↑1 | |
| 2 | adobe | 45 | after effects (11) · animate (10) · prelude (10) | ↑13 | ||||
| 3 | ibm | 43 | security key lifecycle manager (14) · infosphere information server (7) · mq appliance (5) | ↑3 | ||||
| 4 | amd | 40 | amd radeon software (19) · 3rd gen amd epyc (14) · 2nd gen amd epyc (9) | ↑82 | ||||
| 5 | tensorflow | 34 | tensorflow (34) | · | ||||
| 6 | 33 | 2 | 3 | chrome (31) · libjxl (2) · android (1) | ↑5 | |||
| 7 | dell | 32 | 2 | cloudlink (7) · dell emc streaming data platform (5) · cpg bios (3) | ↑59 | |||
| 8 | huawei | 27 | harmonyos (20) · emui (7) · magic ui (7) | ↓5 | ||||
| 9 | siemens | 25 | 1 | capital embedded ar classic 431 422 (8) · capital embedded ar classic r20 11 (8) · pluscontrol 1st gen (6) | ↑3 | |||
| 10 | apache | 24 | 2 | apache ozone (8) · apache traffic server (6) · apache jspwiki (2) | ↑4 | |||
| 11 | cisco | 21 | 4 | 1 | cisco common services platform collector software (4) · cisco catalyst pon series (3) · cisco small business smart and managed switches (2) | ↓7 | ||
| 12 | fortinet | 20 | fortinet fortiportal (5) · fortinet fortimanager (2) · fortinet fortios (2) | ↑18 | ||||
| 13 | jenkins project | 20 | jenkins (13) · jenkins active choices plugin (1) · jenkins owasp dependency check plugin (1) | ↑41 | ||||
| 14 | qualcomm | 18 | 3 | snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer iot snapdragon industrial iot snapdragon iot snapdragon mobile snapdragon voice music snapdragon wearables (4) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer iot snapdragon industrial iot snapdragon mobile (4) · snapdragon auto snapdragon compute snapdragon connectivity snapdragon consumer electronics connectivity snapdragon consumer iot snapdragon industrial iot snapdragon iot snapdragon voice music snapdragon wearables snapdragon wired infrastructure and networking (1) | ↓4 | |||
| 15 | gitlab | 16 | gitlab (16) | ↓7 | ||||
| 16 | busybox | 14 | busybox (14) | new | ||||
| 17 | mozilla | 14 | firefox (12) · thunderbird (10) · firefox esr (8) | · | ||||
| 18 | business dna solutions | 11 | topease (11) | new | ||||
| 19 | delta electronics | 10 | dialink (10) | · | ||||
| 20 | samsung mobile | 10 | samsung mobile devices (4) · samsung flow (2) · group sharing (1) | ↓11 | ||||
| 21 | wireshark foundation | 9 | wireshark (9) | new | ||||
| 22 | motorola | 8 | binatone hubble cameras (8) | · | ||||
| 23 | nec | 8 | clusterpro x (8) | · | ||||
| 24 | nvidia | 8 | nvidia gpu and tegra hardware (8) | ↓2 | ||||
| 25 | palo alto networks | 8 | 1 | 2 | pan os (8) · prisma access (8) | · | ||
| 26 | zoom video communications | 8 | zoom on premise meeting connector mmr (4) · zoom on premise recording connector (4) · zoom on premise virtual room connector (4) | new | ||||
| 27 | acronis | 7 | acronis cyber protect 15 (6) · acronis agent (2) · acronis cyber protect home office (1) | · | ||||
| 28 | lenovo | 7 | thinkpad bios (3) · desktop bios (1) · legion phone2 pro l70081 (1) | · | ||||
| 29 | xen | 7 | xen (7) | · | ||||
| 30 | cloudflare | 6 | octorpki (6) | · | ||||
| 31 | gallagher | 6 | 1 | command centre (3) · command center (1) · command centre mobile client for android (1) | · | |||
| 32 | mcafee | 5 | data loss prevention dlp epo extension (2) · mcafee policy auditor (2) · mcafee drive encryption mde (1) | ↑12 | ||||
| 33 | ohmyzsh | 5 | ohmyzsh ohmyzsh (5) | new | ||||
| 34 | qnap systems | 5 | 1 | qmailagent (2) · qvr (2) · multimedia console (1) | ↓3 | |||
| 35 | sap se | 5 | sap abap platform kernel (1) · sap commerce (1) · sap erp hcm portugal (1) | ↓16 | ||||
| 36 | vim | 5 | vim vim (5) | ↑23 | ||||
| 37 | amazon web services | 4 | aws c io (4) · aws iot device sdk v2 for c (4) · aws iot device sdk v2 for java (4) | new | ||||
| 38 | azeotech | 4 | daqfactory (4) | new | ||||
| 39 | bitdefender | 4 | 1 | gravityzone (4) · endpoint security tools (2) · endpoint security tools for linux (1) | ↑11 | |||
| 40 | factorjs | 4 | factor (4) | new | ||||
| 41 | hitachi energy | 4 | relion 670 650 sam600 io (2) · relion 670 650 series (2) · relion 670 series (2) | new | ||||
| 42 | atlassian | 3 | jira data center (3) · jira server (3) | ↓15 | ||||
| 43 | bookstackapp | 3 | bookstackapp bookstack (3) | ↑20 | ||||
| 44 | getredash | 3 | redash (3) | new | ||||
| 45 | kevinpapst | 3 | kevinpapst kimai2 (3) | new | ||||
| 46 | nlnet labs | 3 | routinator (3) | · | ||||
| 47 | nodebb | 3 | 2 | nodebb (3) | · | |||
| 48 | osisoft | 3 | pi vision (2) · pi web api (1) | · | ||||
| 49 | philips | 3 | mri 1 5t (3) · mri 3t (3) | · | ||||
| 50 | phoenix contact | 3 | fl mguard (2) · pc worx (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2021-11 that are on the CISA KEV catalog today. The 291 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791273 critical—
- 2CWE-352452 critical↑5
- 3CWE-20441 critical↓1
- 4CWE-89342 critical↓1
- 5CWE-788240 critical·
- 6CWE-284224 critical↑9
- 7CWE-416190 critical↑3
- 8CWE-78183 critical↑11
- 9CWE-22163 critical↓5
- 10CWE-125130 critical↑2
- 1CWE-863130 critical↑39
- 2CWE-476120 critical↑6
- 3CWE-287101 critical↑8
- 4CWE-862100 critical↑17
- 5CWE-20091 critical↓10
- 6CWE-78790 critical↓5
- 7CWE-11970 critical—
- 8CWE-12070 critical↓5
- 9CWE-28571 critical↓13
- 10CWE-53270 critical·
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.