CVE-2021-3156

CVSS: 7.8 High
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Risk score: 100.0
Known exploited: CISA KEV
Published: 2021-01-26
Status: Published

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Weaknesses

CWE-193

Coverage 2

threat-intel

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

The Chinese-speaking cybercrime group UAT-10147 is aggressively targeting web servers globally, leveraging AI-powered tools to automate intrusion operations and establish persistent access. They utilize a new cross-platf…

The Hacker News · 6d ago High

CVE-2022-0995 CVE-2021-3156 CVE-2015-5287 CH BR BO ai ransomware malware

threat-intel

UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations

Chinese-speaking cybercrime group UAT-10147 is leveraging AI-powered tools to automate complex post-compromise operations targeting web servers globally. The group, active since early 2026, utilizes a combination of publ…

Cisco Talos · Aug 20, 2026 High

CVE-2022-0995 CVE-2021-3156 CVE-2015-5287 CH BR BO ai automation post-exploitation

All articles mentioning it

news.mlab.sh

CVE-2021-3156

Weaknesses

Coverage 2

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations

Advisories and references