sign in--:--:--UTC

CVE-2021-45046

exploited in the wild☆ pin

CVSS

10.0

Reports

4

First seen

Dec 10, 2021

Last seen

Apr 22, 2026

Affected product

Apache Log4j 2.0-beta9 through 2.15.0

Recent reports

Multiple Vulnerabilities in Oracle Java and Oracle Products (April 2026)

GovCERT.HKApr 22, 2026 Critical

VMware Horizon servers actively being hit with Cobalt Strike via Log4Shell

Huntress BlogJan 15, 2022 Critical

Apache Log4j CVE-2021-45046: Incomplete Patch Leaves Remote Code Execution Vulnerability

NICS TaiwanDec 17, 2021 Critical

Vulnerability in Apache Log4j (CVE-2021-44228, CVE-2021-45046)

GovCERT.HKDec 10, 2021

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans