| | CVE-2021-38653 | Microsoft | high | 7.8 | 4.9%
| | Microsoft Office Visio Remote Code Execution Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38652 | Microsoft | high | 7.6 | 1.2%
| | Microsoft SharePoint Server Spoofing Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38651 | Microsoft | high | 7.6 | 1.2%
| | Microsoft SharePoint Server Spoofing Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38650 | Microsoft | high | 7.6 | 1.5%
| | Microsoft Office Spoofing Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38649 | Microsoft | high | 7.0 | 2.0%
| ⚠ KEV | Open Management Infrastructure Elevation of Privilege Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38648 | Microsoft | high | 7.8 | 11.4%
| ⚠ KEV | Open Management Infrastructure Elevation of Privilege Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38647 | Microsoft | critical | 9.8 | 99.7%
| ⚠ KEV | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38646 | Microsoft | high | 7.8 | 4.4%
| ⚠ KEV | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38645 | Microsoft | high | 7.8 | 1.9%
| ⚠ KEV | Open Management Infrastructure Elevation of Privilege Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38644 | Microsoft | high | 7.8 | 2.1%
| | Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-36956 | Microsoft | medium | 4.4 | 0.8%
| | Azure Sphere Information Disclosure Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-36952 | Microsoft | high | 7.8 | 54.2%
| | Visual Studio Remote Code Execution Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-26437 | Microsoft | medium | 5.5 | 2.1%
| | Visual Studio Code Spoofing Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-26434 | Microsoft | high | 7.8 | 0.8%
| | Visual Studio Elevation of Privilege Vulnerability | Sep 15, 2021 | Aug 10, 2026 |
| | CVE-2021-38642 | Microsoft | medium | 6.1 | 1.1%
| | Microsoft Edge for iOS Spoofing Vulnerability | Sep 2, 2021 | Aug 10, 2026 |
| | CVE-2021-38641 | Microsoft | medium | 6.1 | 1.1%
| | Microsoft Edge for Android Spoofing Vulnerability | Sep 2, 2021 | Aug 10, 2026 |
| | CVE-2021-36930 | Microsoft | medium | 5.3 | 0.9%
| | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Sep 2, 2021 | Aug 10, 2026 |
| | CVE-2021-26439 | Microsoft | medium | 4.6 | 2.5%
| | Microsoft Edge for Android Information Disclosure Vulnerability | Sep 2, 2021 | Aug 10, 2026 |
| | CVE-2021-26436 | Microsoft | medium | 6.1 | 2.3%
| | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Sep 2, 2021 | Aug 10, 2026 |
| | CVE-2021-36931 | Microsoft | medium | 4.4 | 1.2%
| | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Aug 26, 2021 | Aug 10, 2026 |
| | CVE-2021-36929 | Microsoft | medium | 6.3 | 3.1%
| | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | Aug 26, 2021 | Aug 10, 2026 |
| | CVE-2021-36928 | Microsoft | medium | 6.0 | 0.7%
| | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Aug 26, 2021 | Aug 10, 2026 |
| | CVE-2021-37154 | ForgeRock | critical | 9.8 | — | | In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, pot… | Aug 25, 2021 | Nov 21, 2024 |
| | CVE-2021-37153 | ForgeRock | critical | 9.8 | — | | ForgeRock Access Management (AM) before 7.0.2, when configured with Active Directory as the Identity… | Aug 25, 2021 | Nov 21, 2024 |
| | CVE-2021-3712 | Tenable | high | 7.4 | 0.4%
| | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a… | Aug 24, 2021 | Apr 16, 2026 |
| | CVE-2021-39270 | ForgeRock | high | 7.5 | — | | In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur. | Aug 18, 2021 | Nov 21, 2024 |
| | CVE-2021-36950 | Microsoft | medium | 5.4 | 0.9%
| | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-36949 | Microsoft | high | 7.1 | 1.2%
| | Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-36946 | Microsoft | medium | 5.4 | 0.9%
| | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-36945 | Microsoft | high | 7.3 | 1.7%
| | Windows 10 Update Assistant Elevation of Privilege Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-36943 | Microsoft | medium | 4.0 | 0.7%
| | Azure CycleCloud Elevation of Privilege Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-36941 | Microsoft | high | 7.8 | 2.0%
| | Microsoft Word Remote Code Execution Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-36940 | Microsoft | high | 7.6 | 3.6%
| | Microsoft SharePoint Server Spoofing Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-34535 | Microsoft | high | 8.8 | 18.4%
| | Remote Desktop Client Remote Code Execution Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-34532 | Microsoft | medium | 5.5 | 1.1%
| | ASP.NET Core and Visual Studio Information Disclosure Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-34524 | Microsoft | high | 8.1 | 3.3%
| | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-34485 | Microsoft | medium | 5.0 | 1.3%
| | .NET Core and Visual Studio Information Disclosure Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-34478 | Microsoft | high | 7.8 | 54.4%
| | Microsoft Office Remote Code Execution Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-34471 | Microsoft | high | 7.8 | 0.4%
| | Microsoft Defender Elevation of Privilege Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-33762 | Microsoft | high | 7.0 | 0.5%
| | Azure CycleCloud Elevation of Privilege Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-26430 | Microsoft | medium | 6.0 | 0.6%
| | Azure Sphere Denial of Service Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-26429 | Microsoft | high | 7.7 | 0.5%
| | Azure Sphere Elevation of Privilege Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-26428 | Microsoft | medium | 4.4 | 0.7%
| | Azure Sphere Information Disclosure Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-26423 | Microsoft | high | 7.5 | 3.9%
| | .NET Core and Visual Studio Denial of Service Vulnerability | Aug 12, 2021 | Aug 10, 2026 |
| | CVE-2021-22926 | Splunk | high | 7.5 | 0.7%
| | libcurl-using applications can ask for a specific client certificate to be used in a transfer. This … | Aug 5, 2021 | May 28, 2026 |
| | CVE-2021-22925 | Splunk | medium | 5.3 | 0.4%
| | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely … | Aug 5, 2021 | Apr 16, 2026 |
| | CVE-2021-22922 | Splunk | medium | 6.5 | 0.1%
| | When curl is instructed to download content using the metalink feature, thecontents is verified agai… | Aug 5, 2021 | Apr 16, 2026 |
| | CVE-2021-35464 | ForgeRock | critical | 9.8 | — | | ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession para… | Jul 22, 2021 | Nov 5, 2025 |
| | CVE-2021-34467 | Microsoft | high | 7.1 | 5.4%
| | Microsoft SharePoint Server Remote Code Execution Vulnerability | Jul 16, 2021 | Aug 10, 2026 |
| | CVE-2021-34464 | Microsoft | high | 7.8 | 2.9%
| | Microsoft Defender Remote Code Execution Vulnerability | Jul 16, 2021 | Aug 10, 2026 |