CVE-2021-31955
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 5, 2026
4 articles
EPSS Score
Source: FIRST.org · 2026-05-24
3.61%
probability
This CVE has a 3.61% probability
of being exploited in the next 30 days.
0%
Top 87.9th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroKernel information disclosure in SuperFetch
Attack Intelligence
Google Project Zero
Discovered
April 14, 2021
Patched
June 8, 2021
Reported by
Boris Larin (Oct0xor) of Kaspersky Lab
Root Cause Analysis
???
Exploits & PoC
ApexPredator-InfoSec/forti_shield
A combined POC for CVE-2021-31955, CVE-2015-4077, and CVE-2015-5736
2
1 repo — triés par ⭐
Rechercher sur GitHub ↗
Microsoft June 2021 Patch Tuesday fixes 6 exploited zero-days, 50 flaws
BleepingComputer
Jun 08, 2021
Windows 10 targeted by PuzzleMaker hackers using Chrome zero-days
BleepingComputer
Jun 08, 2021
Qualys Response to CISA Alert: Binding Operational Directive 22-01
Qualys
Nov 09, 2021
Signal Intelligence
Confidence
95%
EPSS
3.61%
Mentions
4
Last Seen
Nov 09, 2021
CNA Information
Analyst Note
Auto-imported from Google Project Zero — confirmed zero-day by definition.
Triage Info
Decided atMar 05, 2026