sign in--:--:--UTC

CVE-2021-44228

exploited in the wild☆ pin

CVSS

10.0

Reports

9

First seen

Dec 10, 2021

Last seen

May 28, 2026

Affected product

Apache Log4j 2.0-beta9 through 2.15.0

Associated actors

CL-CRI-1116 ×1 Hazy Scorpius ×1 LAPSUS$ Group ×1 Rostova Organization ×1 Scattered LAPSUS$ Hunters ×1 ShinyHunters ×1 TGR-CRI-1135 ×1

Recent reports

Out of the Crypt: The Evolving Cyber Extortion Economy

Palo Alto Unit 42May 28, 2026 High

Log4Shell exploitation against VMware Horizon detected and remediated

Huntress BlogJun 28, 2022 Critical

VMware Horizon servers actively being hit with Cobalt Strike via Log4Shell

Huntress BlogJan 15, 2022 Critical

High Threat Security Alert: Vulnerabilities in Apache Log4j (CVE-2021-45105, CVE-2021-44228)

GovCERT.HKDec 20, 2021 Critical

Apache Log4j CVE-2021-45046: Incomplete Patch Leaves Remote Code Execution Vulnerability

NICS TaiwanDec 17, 2021 Critical

Log4Shell: A Tradecraft Tuesday Recap

Huntress BlogDec 17, 2021 Critical

Vulnerability in Apache Log4j (CVE-2021-44228, CVE-2021-45046)

GovCERT.HKDec 10, 2021 Critical

Critical RCE Vulnerability in log4j (CVE-2021-44228)

Huntress BlogDec 10, 2021 Critical

Critical RCE Vulnerability: log4j CVE-2021-44228

Huntress BlogDec 10, 2021

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans