sign in--:--:--UTC

CVE-2021-38003

exploited in the wild☆ pin

CVSS

—

Reports

6

First seen

Oct 29, 2021

Last seen

Oct 13, 2026

Affected product

Google Chrome, Microsoft Edge

Associated actors

UNC3569 ×3 China-aligned espionage groups (BlueMoon campaign) ×1 NightEagle ×1 OpenAI agents (malicious swarm) ×1 Red Heron ×1 ShinyHunters ×1 APT29 ×1 Suspected Russian-speaking threat actor ×1 UAT-11823 ×1 UAT-11988 ×1 UAT-12197 ×1 Suspected Chinese-speaking threat actor ×1

Recent reports

September 2026 CVE Landscape: 94 High-Impact Vulnerabilities with Active Exploitation

Recorded Future InsiktOct 13, 2026 High

Weekly Recap: AI Agents in Attacks, RubyGems Compromise, WeChat Worm, PaperCut Exploitation

The Hacker NewsSep 14, 2026 High

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

The Hacker NewsSep 11, 2026 Critical

Google Chrome and Microsoft Edge contain multiple high-risk RCE vulnerabilities (CVE-2021-37997–38003)

NICS TaiwanNov 1, 2021 High

Multiple vulnerabilities in Microsoft Edge (Chromium-based) exploited in the wild

GovCERT.HKNov 1, 2021 Critical

High Threat Security Alert: Multiple vulnerabilities in Google Chrome

GovCERT.HKOct 29, 2021

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans