56.3% of 1,267 CVEs mentioned on 15 Dark Web forums in multiple languages
between January 2020 and March 2021 were disclosed in 2020.
17.3% of these 1,267 CVEs were disclosed in 2019.
CVE-2020-0796 (aka SMBGhost, CVSS:10) received 52 posts, the highest
number of posts among the CVEs examined. CVE-2019-19781, a flaw in Citrix
Application Delivery Controller (ADC) and Gateway (CVSS:9.8), received 49 posts.
Different CVEs were most mentioned in the different language forums
The top mentioned CVE on Russian speaking forums was CVE-2019-19781
The top mentioned CVE on Chinese speaking forums was CVE-2020-0796
The top mentioned CVEs on English speaking forums were CVE-2020-
0688 (CVSS:8.8) and CVE-2019-19781
The top mentioned CVE on Turkish speaking forums was CVE-2019-6340
(CVSS:8.1)
CVE-2017-11882, a Microsoft Office Memory Corruption Vulnerability (CVSS:7.8),
was mentioned in the highest number of forums, 12 out of the 15 forums
examined. CVE-2020-0796 was mentioned in 11 out of 15 forums.
The newest CVE mentioned is CVE-2021-3177 (flaw in Python 3.x through 3.9.1,
CVSS:9.8) and the oldest CVE is CVE-2005-1513 (flaw in Qmail, CVSS:5.0).
NEW
between January 2020 and March 01, 2021. 1.
Key Findings
3 Vulnerability Threat Intelligence Report