CVE Intelligence
Skip to main content

Month report

December 2021

Rolled up 2026-08-09 20:45 from 375,726 CVE records

1,978 CVEs published, +28.6% on the same month last year. 132 rated critical, 20 listed by CISA as exploited. microsoft led with 68; the most common weakness class was CWE-79 (109). discourse climbed 35 places, the largest move. 10 vendors ranked for the first time.

Published

1,978

+31.2%on the previous month

Critical / high

132 / 377

of the 852 scored

Medium / low

308 / 35

the rest of the scored bands

Added to CISA KEV

20

listed as exploited this month

Public exploit

62

exploit code indexed publicly

Scanner template

0

0% of the month

Publication to KEV

How long before CISA listed them

15 published this month and listed since — not the 20 listed during it.

Median days to listing

503

from publication to CISA's date added

Listed within 7 days

20%

of the 15

Listed within 30 days

20%

of the 15

Weakness × vendor

Where the two overlap

CVEs carrying both. Each row is shaded against its own worst class.
VendorCWE-79CWE-89CWE-125CWE-352CWE-22CWE-78CWE-787CWE-20
microsoft
huawei
siemens14214
ibm
fortinet
google
adobe93
mozilla

Detection gap

Listed as exploited, no public template

CVEs CISA listed this month

Listed this month

20

added to the CISA KEV catalog

With a template

12

60% covered

No template

8

nothing in the public index

Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.

Vendors

Ranked by distinct CVEs this month

Δ is the move against last month's rank.
Vendors ranked by distinct CVEs published in 2021-12, sorted by CVEs descending
#VendorTop products
1microsoft68727windows 10 version 2004 (30) · windows 10 version 21h1 (30) · windows 10 version 21h2 (30)
2huawei67harmonyos (60) · emui (25) · magic ui (24)↑6
3siemens46jt utilities (23) · jttk (21) · jt2go (14)↑6
4ibm42cognos analytics (7) · spectrum copy data management (7) · db2 for linux unix and windows (5)↓1
5fortinet39fortinet fortiweb (15) · fortinet fortios (6) · fortinet fortiwlm (3)↑7
6google38chrome (36) · dart sdk (1) · google exposure notifications verification server (1)
7adobe28premiere rush (14) · dimension (6) · audition (3)↓5
8mozilla271firefox (25) · thunderbird (20) · firefox esr (19)↑9
9gitlab221gitlab (21) · gitlab runner (1)↑6
10apple19macos (16) · ios (5) · watchos (5)·
11samsung mobile18samsung mobile devices (10) · samsung internet (2) · samsung pay (2)↑9
12apache14227apache log4j2 (3) · apache http server (2) · apache airavata django portal (1)↓2
13elecom co13elecom lan routers (8) · elecom routers (3) · elecom lan router (2)·
14sap se121sap 3d visual enterprise viewer (3) · kyma (1) · saf t framework (1)↑21
15sonicwall11112sonicwall sma100 (10) · sonicwall global vpn client (1)·
16livehelperchat10livehelperchat livehelperchat (10)new
17vim9vim vim (9)↑19
18dell81avamar (3) · wyse management suite (2) · dell wyse device agent (1)↓11
19myscada87mypro (8)new
20crafter software7crafter cms (7)·
21solarwinds7web help desk (2) · orion (1) · orion core (1)·
22wireshark foundation7wireshark (7)↓1
23fatpipe621ipvpn (6) · mpvpn (6) · warp (6)new
24fuji electric6tellus lite v simulator (6) · v server lite (6)·
25star7th6star7th showdoc (6)↑28
26trend micro6trend micro worry free business security (3) · trend micro apex one (1) · trend micro security 2021 consumer (1)·
27yetiforcecompany6yetiforcecompany yetiforcecrm (6)new
28delta electronics5diaenergie (4) · cncsoft (1)↓9
29discourse5discourse (3) · discourse footnote (1) · message bus (1)↑35
30mesa labs52amegaview (5)new
31philips5patient information center ix pic ix (3) · intellibridge ec 40 hub (2) · intellibridge ec 80 hub (2)↑18
32requarks5wiki (5)·
33snipe5snipe snipe it (5)↑19
34bosch41bvms (4) · divar ip 7000 r2 (4) · divar ip all in one 5000 (4)·
35esri4arcgis server (4)·
36grafana411grafana (3) · agent (1)↑35
37ifmeorg4ifme (4)new
38kevinpapst4kevinpapst kimai2 (4)↑7
39pimcore4pimcore pimcore (4)·
40tcman41gim (4)new
41wp cloud plugins4lets box (1) · out of the box (1) · share one drive (1)new
42zyxel4gs1900 series firmware (2) · nbg6604 series firmware (2) · xgs1210 series firmware (1)·
43amd3amd epyc (1) · amd processors (1) · prof tool (1)↓39
44chain sea information integration co31ai chatbot system (3)new
45delicious brains3advanced custom fields and advanced custom fields pro (3)·
46elgg31elgg elgg (3)·
47enalean3tuleap (3)·
48f secure3f secure mobile security (2) · f secure endpoint protection products on windows and mac f secure linux security 32 bit f secure linux security 64 f secure atlant f secure internet gatekeeper (1)·
49galette3galette (3)new
50japan total system co3groupsession free edition groupsession bycloud groupsession zion (3)·

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2021-12 that are on the CISA KEV catalog today. The 20 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.

Weaknesses

CWE classes by distinct CVEs

  • 1CWE-791091 critical
  • 2CWE-89512 critical↑2
  • 3CWE-125290 critical↑7
  • 4CWE-352270 critical↓2
  • 5CWE-22264 critical↑4
  • 6CWE-782519 critical↑2
  • 7CWE-787221 critical↑9
  • 8CWE-20171 critical↓5
  • 9CWE-121156 critical↑19
  • 10CWE-284141 critical↓4
  • 1CWE-862120 critical↑3
  • 2CWE-502112 critical↑19
  • 3CWE-788110 critical↓8
  • 4CWE-119103 critical↑3
  • 5CWE-20090 critical
  • 6CWE-26990 critical↑19
  • 7CWE-28792 critical↓4
  • 8CWE-40091 critical↑12
  • 9CWE-41690 critical↓12
  • 10CWE-12280 critical↑2

One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.