CVE-2021-3156 CISA KEV · Actively exploited
Sudo Heap-Based Buffer Overflow Vulnerability
CVSS score
—
EPSS probability
%100.0
Risk score
—
Published
4 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
Cisco Talos discovered a Chinese-speaking cybercrime group, tracked as UAT-10147, that targets a wide range of vulnerable web servers. This is an overview of the campaign, examining the countries affected, potential impact of BadIIS infections, the attack chain, and post-compromise tactics.
Similar Vulnerabilities
7.8
CVE-2025-32463 Actively exploitedsudo: LPE via chroot option
Patch verified Public Exploits:11EPSS %55
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-3156"