{"metadata": {"vulnerability": "CVE-2021-38085", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2021-08-03T00:00:00Z", "date_only": false, "value": "2021-08-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-38085", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-08-11T17:39:38Z", "date_only": false, "value": "2021-08-11T17:39:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-38085", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-08-11T18:15:00Z", "date_only": false, "value": "2021-08-11T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JP55-93WH-X75G", "record": "GHSA-JP55-93WH-X75G", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-08-11T18:15:00Z", "date_only": false, "value": "2021-08-11T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-38085", "record": "GSD-2021-38085", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-08-11T18:15:07.500Z", "date_only": false, "value": "2021-08-11T18:15:07.500", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38085", "record": "FKIE_CVE-2021-38085", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-08-11T20:12:50Z", "date_only": false, "value": "2021-08-11T20:12:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/canon_driver_privesc.rb", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "c2b89f44-2d70-4e80-9e15-b002ca72aaf0", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/canon_driver_privesc.rb"}, {"timestamp": "2021-08-11T22:38:39Z", "date_only": false, "value": "2021-08-11T22:38:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/27184", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "e644c017-9e1a-4df8-9ed0-94b42d57b6c6", "content": "\u203c CVE-2021-38085 \u203c\n\nThe Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CNMurGE.dll and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. This occurs because the driver drops a world-writable DLL into a CanonBJ %PROGRAMDATA% location that gets loaded by printisolationhost (a system process).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/27184"}, {"timestamp": "2021-08-12T13:35:20Z", "date_only": false, "value": "2021-08-12T13:35:20.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-38085", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-19T19:49:00Z", "date_only": false, "value": "2021-08-19T19:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-38085", "record": "GSD-2021-38085", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2021-08-20T02:37:24Z", "date_only": false, "value": "2021-08-20T02:37:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/348", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "b3fb9ab8-5bf2-48e8-b3ca-2362dc3533d9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893. \nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-38085", "url": "https://t.me/GithubRedTeam/348", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-05-24T19:10:40Z", "date_only": false, "value": "2022-05-24T19:10:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JP55-93WH-X75G", "record": "GHSA-JP55-93WH-X75G", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-24T19:10:40Z", "date_only": false, "value": "2022-05-24T19:10:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JP55-93WH-X75G", "record": "GHSA-JP55-93WH-X75G", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:23:17.573Z", "date_only": false, "value": "2023-12-13T01:23:17.573657Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-38085", "record": "GSD-2021-38085", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T01:30:09.066Z", "date_only": false, "value": "2024-08-04T01:30:09.066Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-38085", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T01:30:09.066Z", "date_only": false, "value": "2024-08-04T01:30:09.066Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-38085", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "2649ad91-4c86-4f92-847f-8a04b92fd5c0"}, {"timestamp": "2025-02-23T04:10:39Z", "date_only": false, "value": "2025-02-23T04:10:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "596f625b-8237-4ffe-8294-c9be599054c7"}, {"timestamp": "2026-06-17T04:01:26.170Z", "date_only": false, "value": "2026-06-17T04:01:26.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38085", "record": "FKIE_CVE-2021-38085", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T20:02:20.516Z", "date_only": false, "value": "2026-09-01T20:02:20.516012Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/25171", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "71210e6c-833d-4985-8737-05a0fa5ec7d8", "url": "https://t.me/hacking_Attack/25171"}, {"timestamp": "2026-09-01T20:02:22.494Z", "date_only": false, "value": "2026-09-01T20:02:22.494463Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/24066", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "41ff2f7a-10bb-49a5-9113-fe6eb89559f9", "url": "https://t.me/hacking_Attack/24066"}, {"timestamp": "2026-09-07T13:00:05.120Z", "date_only": false, "value": "2026-09-07T13:00:05.120797Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/25171", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "d9690d96-be24-45f9-bd4b-7fca60c4f9c6", "url": "https://t.me/hacking_Attack/25171", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-07T15:00:06.810Z", "date_only": false, "value": "2026-09-07T15:00:06.810812Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/24066", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "741b6527-6258-4644-90fe-505114e3b268", "url": "https://t.me/hacking_Attack/24066", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-15T05:10:36.601Z", "anchors": {"origin": {"timestamp": "2021-08-11T17:39:38Z", "date_only": false, "value": "2021-08-11T17:39:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-38085", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-08-11T17:39:38Z", "date_only": false, "value": "2021-08-11T17:39:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-38085", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-08-20T02:37:24Z", "date_only": false, "value": "2021-08-20T02:37:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/348", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "b3fb9ab8-5bf2-48e8-b3ca-2362dc3533d9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893. \nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-38085", "url": "https://t.me/GithubRedTeam/348", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 723466.0, "hours": 200.96277777777777, "days": 8.373449074074074, "min_seconds": 723466.0, "max_seconds": 723466.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-08-11T17:39:38Z", "date_only": false, "value": "2021-08-11T17:39:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-38085", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-08-20T02:37:24Z", "date_only": false, "value": "2021-08-20T02:37:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/348", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "b3fb9ab8-5bf2-48e8-b3ca-2362dc3533d9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893. \nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-38085", "url": "https://t.me/GithubRedTeam/348", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 166015858.601315, "hours": 46115.516278143055, "days": 1921.4798449226273, "min_seconds": 166015858.601315, "max_seconds": 166015858.601315, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-08-11T17:39:38Z", "date_only": false, "value": "2021-08-11T17:39:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-38085", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T05:10:36.601Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 165292392.601315, "hours": 45914.55350036528, "days": 1913.1063958485531, "min_seconds": 165292392.601315, "max_seconds": 165292392.601315, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-08-20T02:37:24Z", "date_only": false, "value": "2021-08-20T02:37:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/348", "record": "CVE-2021-38085", "field": "creation_timestamp", "uuid": "b3fb9ab8-5bf2-48e8-b3ca-2362dc3533d9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aProof-of-Concept (PoC) script to exploit Pulse Secure CVE-2021-22893. \nURL\uff1ahttps://github.com/AlAIAL90/CVE-2021-38085", "url": "https://t.me/GithubRedTeam/348", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T05:10:36.601Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}