[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZer0cZqn53iwCngZMuF9W7_stsbpJytUSFmV3uNt_DM":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":996,"kevVulnerabilities":1058,"topProductsByCves":1763,"seoMetadata":1774,"meta":1783},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":995},12531,"google",261,13072,102,13847,"2026-04-06","g",[16,22,29,36,43,49,55,59,63,69,74,79,83,89,93,98,102,106,111,115,120,124,128,132,136,139,142,147,152,155,160,163,168,173,176,181,184,187,192,196,199,204,208,211,214,217,220,223,226,231,235,239,242,245,249,252,255,258,261,264,267,270,273,278,281,284,287,290,293,297,300,303,306,309,312,315,319,324,328,332,335,339,343,347,351,356,360,365,369,373,376,380,384,387,391,395,398,403,407,411,415,419,423,426,430,434,438,442,445,449,453,457,460,463,467,471,475,479,483,487,492,496,500,505,510,514,518,522,526,531,536,540,545,549,553,558,563,567,571,575,579,583,587,591,595,599,603,608,612,616,620,624,627,630,634,639,643,647,651,654,657,661,665,668,671,674,677,680,683,686,689,692,696,700,704,707,710,713,717,721,725,729,733,736,739,743,748,751,755,760,765,769,772,777,781,785,789,793,798,802,806,810,814,817,820,824,827,830,833,836,839,842,845,848,851,854,857,860,863,866,869,872,875,878,881,884,888,892,895,898,901,904,907,910,913,916,919,922,925,929,932,935,938,941,944,947,950,953,956,959,962,965,968,971,974,977,980,983,986,989,992],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},51056,"android",76,8589,34,{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},51088,"chrome",9619,3680,69,"2025-09-24",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},51100,"chrome_os",702,475,13,"2025-09-10",{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":41,"last_cve_update":42},51291,"tensorflow",94,429,0,"2024-07-30",{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":41,"last_cve_update":48},51305,"v8",336,33,"2016-07-23",{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":41,"last_cve_update":54},51072,"asylo",17,16,"2021-08-02",{"id":56,"product_name":57,"version_count":41,"cve_count":34,"kev_count":41,"last_cve_update":58},51219,"nexus_9","2019-06-06",{"id":60,"product_name":61,"version_count":41,"cve_count":34,"kev_count":41,"last_cve_update":62},51130,"frame","2012-08-06",{"id":64,"product_name":65,"version_count":66,"cve_count":67,"kev_count":41,"last_cve_update":68},51080,"blink",3,12,"2019-11-12",{"id":70,"product_name":71,"version_count":34,"cve_count":72,"kev_count":41,"last_cve_update":73},51228,"picasa",11,"2015-11-17",{"id":75,"product_name":76,"version_count":41,"cve_count":77,"kev_count":41,"last_cve_update":78},51110,"cr-48_chromebook",9,"2012-08-22",{"id":80,"product_name":81,"version_count":41,"cve_count":77,"kev_count":41,"last_cve_update":82},51210,"nexus_5","2023-12-08",{"id":84,"product_name":85,"version_count":86,"cve_count":87,"kev_count":41,"last_cve_update":88},51176,"mini_search_appliance",2,8,"2007-10-06",{"id":90,"product_name":91,"version_count":41,"cve_count":87,"kev_count":41,"last_cve_update":92},51173,"linux_and_chrome_os","2023-03-07",{"id":94,"product_name":95,"version_count":41,"cve_count":96,"kev_count":41,"last_cve_update":97},51301,"tunnelblick",7,"2012-08-26",{"id":99,"product_name":100,"version_count":41,"cve_count":96,"kev_count":41,"last_cve_update":101},51254,"pixel_c","2024-10-25",{"id":103,"product_name":104,"version_count":41,"cve_count":96,"kev_count":41,"last_cve_update":105},51276,"search_appliance","2011-07-28",{"id":107,"product_name":108,"version_count":109,"cve_count":96,"kev_count":41,"last_cve_update":110},51284,"sketchup",4,"2016-02-22",{"id":112,"product_name":113,"version_count":41,"cve_count":96,"kev_count":114,"last_cve_update":101},51229,"pixel",1,{"id":116,"product_name":117,"version_count":41,"cve_count":118,"kev_count":41,"last_cve_update":119},51213,"nexus_6",6,"2016-10-10",{"id":121,"product_name":122,"version_count":114,"cve_count":118,"kev_count":41,"last_cve_update":123},51187,"nest_cam_iq_indoor_firmware","2019-10-31",{"id":125,"product_name":126,"version_count":41,"cve_count":127,"kev_count":41,"last_cve_update":101},51242,"pixel_6",5,{"id":129,"product_name":130,"version_count":118,"cve_count":127,"kev_count":41,"last_cve_update":131},51271,"rendertron","2021-02-23",{"id":133,"product_name":134,"version_count":86,"cve_count":127,"kev_count":41,"last_cve_update":135},51090,"chromecast_firmware","2023-12-11",{"id":137,"product_name":138,"version_count":41,"cve_count":127,"kev_count":41,"last_cve_update":119},51211,"nexus_5x",{"id":140,"product_name":141,"version_count":41,"cve_count":127,"kev_count":41,"last_cve_update":119},51214,"nexus_6p",{"id":143,"product_name":144,"version_count":145,"cve_count":127,"kev_count":41,"last_cve_update":146},51265,"protobuf-java",85,"2024-09-19",{"id":148,"product_name":149,"version_count":150,"cve_count":127,"kev_count":41,"last_cve_update":151},51132,"fuchsia",26,"2022-05-03",{"id":153,"product_name":154,"version_count":41,"cve_count":127,"kev_count":41,"last_cve_update":135},51089,"chromecast",{"id":156,"product_name":157,"version_count":158,"cve_count":127,"kev_count":41,"last_cve_update":159},51263,"protobuf",247,"2025-06-16",{"id":161,"product_name":162,"version_count":41,"cve_count":127,"kev_count":41,"last_cve_update":119},51060,"android_one",{"id":164,"product_name":165,"version_count":166,"cve_count":127,"kev_count":41,"last_cve_update":167},51311,"web_toolkit",23,"2013-11-18",{"id":169,"product_name":170,"version_count":171,"cve_count":127,"kev_count":41,"last_cve_update":172},51298,"toolbar",19,"2007-12-27",{"id":174,"product_name":175,"version_count":41,"cve_count":127,"kev_count":41,"last_cve_update":123},51186,"nest_cam_iq_indoor",{"id":177,"product_name":178,"version_count":179,"cve_count":127,"kev_count":41,"last_cve_update":180},51163,"gvisor",232,"2025-03-28",{"id":182,"product_name":183,"version_count":67,"cve_count":109,"kev_count":41,"last_cve_update":146},51266,"protobuf-javalite",{"id":185,"product_name":186,"version_count":41,"cve_count":109,"kev_count":41,"last_cve_update":101},51261,"pixel_xl",{"id":188,"product_name":189,"version_count":190,"cve_count":109,"kev_count":41,"last_cve_update":191},51069,"app_engine_python_sdk",95,"2011-10-30",{"id":193,"product_name":194,"version_count":41,"cve_count":109,"kev_count":41,"last_cve_update":195},51217,"nexus_7_\\(2013\\)","2016-05-09",{"id":197,"product_name":198,"version_count":41,"cve_count":109,"kev_count":41,"last_cve_update":101},51245,"pixel_7",{"id":200,"product_name":201,"version_count":202,"cve_count":109,"kev_count":41,"last_cve_update":203},51116,"earth",40,"2020-05-04",{"id":205,"product_name":206,"version_count":118,"cve_count":109,"kev_count":41,"last_cve_update":207},51131,"fscrypt","2022-02-25",{"id":209,"product_name":210,"version_count":41,"cve_count":109,"kev_count":41,"last_cve_update":101},51230,"pixel_2",{"id":212,"product_name":213,"version_count":41,"cve_count":109,"kev_count":41,"last_cve_update":101},51237,"pixel_4a",{"id":215,"product_name":216,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51251,"pixel_9",{"id":218,"product_name":219,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51250,"pixel_8_pro",{"id":221,"product_name":222,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51249,"pixel_8a",{"id":224,"product_name":225,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51248,"pixel_8",{"id":227,"product_name":228,"version_count":229,"cve_count":66,"kev_count":41,"last_cve_update":230},51161,"guava",54,"2023-06-14",{"id":232,"product_name":233,"version_count":118,"cve_count":66,"kev_count":41,"last_cve_update":234},51162,"guest-oslogin","2020-06-22",{"id":236,"product_name":237,"version_count":238,"cve_count":66,"kev_count":41,"last_cve_update":146},51267,"protobuf-kotlin",10,{"id":240,"product_name":241,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51247,"pixel_7_pro",{"id":243,"product_name":244,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51246,"pixel_7a",{"id":246,"product_name":247,"version_count":66,"cve_count":66,"kev_count":41,"last_cve_update":248},51178,"monorail","2018-11-20",{"id":250,"product_name":251,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51244,"pixel_6_pro",{"id":253,"product_name":254,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51243,"pixel_6a",{"id":256,"product_name":257,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51241,"pixel_5a",{"id":259,"product_name":260,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51240,"pixel_5",{"id":262,"product_name":263,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51239,"pixel_4_xl",{"id":265,"product_name":266,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51238,"pixel_4a_5g",{"id":268,"product_name":269,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51236,"pixel_4",{"id":271,"product_name":272,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":58},51216,"nexus_7",{"id":274,"product_name":275,"version_count":276,"cve_count":66,"kev_count":41,"last_cve_update":277},51134,"gerrit",115,"2021-02-17",{"id":279,"product_name":280,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51231,"pixel_2_xl",{"id":282,"product_name":283,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51232,"pixel_3",{"id":285,"product_name":286,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51233,"pixel_3a",{"id":288,"product_name":289,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51234,"pixel_3a_xl",{"id":291,"product_name":292,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51235,"pixel_3_xl",{"id":294,"product_name":295,"version_count":87,"cve_count":66,"kev_count":41,"last_cve_update":296},51061,"android_sdk","2011-07-08",{"id":298,"product_name":299,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51258,"pixel_tablet",{"id":301,"product_name":302,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51257,"pixel_slate",{"id":304,"product_name":305,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51256,"pixel_pro_xl",{"id":307,"product_name":308,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51255,"pixel_fold",{"id":310,"product_name":311,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51253,"pixel_9_pro_fold",{"id":313,"product_name":314,"version_count":41,"cve_count":66,"kev_count":41,"last_cve_update":101},51252,"pixel_9_pro",{"id":316,"product_name":317,"version_count":318,"cve_count":86,"kev_count":41,"last_cve_update":159},51269,"protobuf-python",121,{"id":320,"product_name":321,"version_count":322,"cve_count":86,"kev_count":41,"last_cve_update":323},51310,"web_stories",49,"2023-05-08",{"id":325,"product_name":326,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":327},51059,"android_debug_bridge","2014-05-14",{"id":329,"product_name":330,"version_count":114,"cve_count":86,"kev_count":41,"last_cve_update":331},51165,"home_firmware","2024-01-02",{"id":333,"product_name":334,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":331},51164,"home",{"id":336,"product_name":337,"version_count":109,"cve_count":86,"kev_count":41,"last_cve_update":338},51156,"google_sketchup","2010-01-15",{"id":340,"product_name":341,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":342},51079,"bionic","2015-04-01",{"id":344,"product_name":345,"version_count":96,"cve_count":86,"kev_count":41,"last_cve_update":346},51153,"google-protobuf","2022-10-12",{"id":348,"product_name":349,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":350},51152,"google_play_services_software_development_kit","2022-08-12",{"id":352,"product_name":353,"version_count":354,"cve_count":86,"kev_count":41,"last_cve_update":355},51129,"flatbuffers",39,"2020-12-31",{"id":357,"product_name":358,"version_count":96,"cve_count":86,"kev_count":41,"last_cve_update":359},51289,"talk","2005-11-29",{"id":361,"product_name":362,"version_count":363,"cve_count":86,"kev_count":41,"last_cve_update":364},51127,"firebase_php-jwt",35,"2025-07-31",{"id":366,"product_name":367,"version_count":77,"cve_count":86,"kev_count":41,"last_cve_update":368},51074,"bazel","2022-10-26",{"id":370,"product_name":371,"version_count":114,"cve_count":86,"kev_count":41,"last_cve_update":372},51199,"nest_mini_firmware","2024-08-19",{"id":374,"product_name":375,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":372},51198,"nest_mini",{"id":377,"product_name":378,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":379},51114,"desktop","2007-06-11",{"id":381,"product_name":382,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":383},51180,"nearby","2024-06-26",{"id":385,"product_name":386,"version_count":41,"cve_count":86,"kev_count":41,"last_cve_update":119},51221,"nexus_player",{"id":388,"product_name":389,"version_count":86,"cve_count":86,"kev_count":41,"last_cve_update":390},51303,"updater","2024-06-07",{"id":392,"product_name":393,"version_count":394,"cve_count":86,"kev_count":41,"last_cve_update":151},51223,"oauth_client_library_for_java",45,{"id":396,"product_name":397,"version_count":238,"cve_count":86,"kev_count":41,"last_cve_update":146},51268,"protobuf-kotlin-lite",{"id":399,"product_name":400,"version_count":401,"cve_count":86,"kev_count":41,"last_cve_update":402},51177,"mod_pagespeed",135,"2012-09-15",{"id":404,"product_name":405,"version_count":67,"cve_count":86,"kev_count":41,"last_cve_update":406},51172,"kubernetes_engine","2019-07-31",{"id":408,"product_name":409,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":410},51314,"youtube_android_player_api","2023-03-01",{"id":412,"product_name":413,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":414},51055,"admob","2012-11-04",{"id":416,"product_name":417,"version_count":171,"cve_count":114,"kev_count":41,"last_cve_update":418},51057,"android_api","2014-03-03",{"id":420,"product_name":421,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":422},51058,"android_browser","2014-09-02",{"id":424,"product_name":425,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":327},51062,"android_sdk_platform_tools",{"id":427,"product_name":428,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":429},51064,"android_tv","2020-09-18",{"id":431,"product_name":432,"version_count":96,"cve_count":114,"kev_count":41,"last_cve_update":433},51065,"androidx.car.app","2024-11-20",{"id":435,"product_name":436,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":437},51066,"angle","2021-11-02",{"id":439,"product_name":440,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":441},51067,"api_c\\+\\+_client","2019-05-30",{"id":443,"product_name":444,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":359},51068,"api_search",{"id":446,"product_name":447,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":448},51070,"application_load_balancer","2025-05-16",{"id":450,"product_name":451,"version_count":66,"cve_count":114,"kev_count":41,"last_cve_update":452},51073,"authenticator","2013-04-24",{"id":454,"product_name":455,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":456},51075,"bazel_for_android_studio","2024-06-18",{"id":458,"product_name":459,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":456},51076,"bazel_for_clion",{"id":461,"product_name":462,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":456},51077,"bazel_for_intellij",{"id":464,"product_name":465,"version_count":34,"cve_count":114,"kev_count":41,"last_cve_update":466},51078,"bindiff","2021-06-29",{"id":468,"product_name":469,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":470},51081,"boringssl","2018-06-15",{"id":472,"product_name":473,"version_count":53,"cve_count":114,"kev_count":41,"last_cve_update":474},51082,"brotli","2020-09-15",{"id":476,"product_name":477,"version_count":72,"cve_count":114,"kev_count":41,"last_cve_update":478},51085,"cardboard","2018-11-08",{"id":480,"product_name":481,"version_count":96,"cve_count":114,"kev_count":41,"last_cve_update":482},51087,"checkout-php","2012-11-06",{"id":484,"product_name":485,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":486},51098,"chrome_frame","2013-03-07",{"id":488,"product_name":489,"version_count":490,"cve_count":114,"kev_count":41,"last_cve_update":491},51099,"chrome-launcher",27,"2020-05-02",{"id":493,"product_name":494,"version_count":66,"cve_count":114,"kev_count":41,"last_cve_update":495},51101,"chrome_os_readiness_tool","2021-09-08",{"id":497,"product_name":498,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":499},51102,"cityhash","2012-11-28",{"id":501,"product_name":502,"version_count":503,"cve_count":114,"kev_count":41,"last_cve_update":504},51103,"closure_library",47,"2020-03-26",{"id":506,"product_name":507,"version_count":508,"cve_count":114,"kev_count":41,"last_cve_update":509},51104,"cloud_firestore",137,"2023-12-04",{"id":511,"product_name":512,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":513},51105,"cloud_iot_device_sdk_for_embedded_c","2021-05-04",{"id":515,"product_name":516,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":517},51107,"cloud_messaging_notification","2019-08-07",{"id":519,"product_name":520,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":521},51111,"critters","2023-08-21",{"id":523,"product_name":524,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":525},51112,"custom_search_engine","2007-06-28",{"id":527,"product_name":528,"version_count":529,"cve_count":114,"kev_count":41,"last_cve_update":530},51113,"data_transfer_project",37,"2022-03-29",{"id":532,"product_name":533,"version_count":534,"cve_count":114,"kev_count":41,"last_cve_update":535},51115,"drive",42,"2022-10-17",{"id":537,"product_name":538,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":539},51118,"email","2015-02-15",{"id":541,"product_name":542,"version_count":543,"cve_count":114,"kev_count":41,"last_cve_update":544},51119,"espv2",50,"2023-04-26",{"id":546,"product_name":547,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":548},51120,"exposure_notifications","2020-09-30",{"id":550,"product_name":551,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":552},51121,"exposure_notifications_verification_server","2021-03-31",{"id":554,"product_name":555,"version_count":556,"cve_count":114,"kev_count":41,"last_cve_update":557},51122,"exposure_notification_verification_server",73,"2021-12-09",{"id":559,"product_name":560,"version_count":561,"cve_count":114,"kev_count":41,"last_cve_update":562},51123,"extensible_service_proxy",60,"2021-10-07",{"id":564,"product_name":565,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":566},51125,"firebase_command_line_interface","2024-05-02",{"id":568,"product_name":569,"version_count":238,"cve_count":114,"kev_count":41,"last_cve_update":570},51128,"firebase\\\u002Futil","2020-11-16",{"id":572,"product_name":573,"version_count":127,"cve_count":114,"kev_count":41,"last_cve_update":574},51133,"gears","2009-03-24",{"id":576,"product_name":577,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":578},51135,"gizmo5","2020-02-12",{"id":580,"product_name":581,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":582},51136,"glass","2013-07-18",{"id":584,"product_name":585,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":586},51137,"gmail","2018-05-16",{"id":588,"product_name":589,"version_count":238,"cve_count":114,"kev_count":41,"last_cve_update":590},51138,"go-attestation","2022-02-04",{"id":592,"product_name":593,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":594},51139,"google\\\u002Fapple_exposure_notifications","2021-04-28",{"id":596,"product_name":597,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":598},51140,"google_apps","2008-09-03",{"id":600,"product_name":601,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":602},51146,"google_cloud_platform_marketplace","2023-04-12",{"id":604,"product_name":605,"version_count":606,"cve_count":114,"kev_count":41,"last_cve_update":607},51147,"google_cloud_platform_service_broker",28,"2019-08-05",{"id":609,"product_name":610,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":611},51150,"google_i\\\u002Fo_2017","2017-05-18",{"id":613,"product_name":614,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":615},51154,"google_search","2022-12-13",{"id":617,"product_name":618,"version_count":127,"cve_count":114,"kev_count":41,"last_cve_update":619},51159,"go-tpm","2020-08-11",{"id":621,"product_name":622,"version_count":202,"cve_count":114,"kev_count":41,"last_cve_update":623},51160,"gson","2022-05-01",{"id":625,"product_name":626,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":331},51166,"home_mini",{"id":628,"product_name":629,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":331},51167,"home_mini_firmware",{"id":631,"product_name":632,"version_count":96,"cve_count":114,"kev_count":41,"last_cve_update":633},51168,"idapython","2011-12-27",{"id":635,"product_name":636,"version_count":637,"cve_count":114,"kev_count":41,"last_cve_update":638},51169,"kctf",22,"2022-06-13",{"id":640,"product_name":641,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":642},51170,"kml","2007-12-04",{"id":644,"product_name":645,"version_count":34,"cve_count":114,"kev_count":41,"last_cve_update":646},51174,"looker","2024-05-22",{"id":648,"product_name":649,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":650},51179,"native_client","2020-02-25",{"id":652,"product_name":653,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":331},51181,"nest_audio",{"id":655,"product_name":656,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":331},51182,"nest_audio_firmware",{"id":658,"product_name":659,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":660},51185,"nest_cam_iq","2019-08-20",{"id":662,"product_name":663,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":664},51194,"nest_hub","2023-07-25",{"id":666,"product_name":667,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":664},51195,"nest_hub_firmware",{"id":669,"product_name":670,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":664},51196,"nest_hub_max",{"id":672,"product_name":673,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":664},51197,"nest_hub_max_firmware",{"id":675,"product_name":676,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":664},51200,"nest_wifi_6e",{"id":678,"product_name":679,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":664},51201,"nest_wifi_6e_firmware",{"id":681,"product_name":682,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":664},51202,"nest_wifi_point",{"id":684,"product_name":685,"version_count":109,"cve_count":114,"kev_count":41,"last_cve_update":664},51203,"nest_wifi_point_firmware",{"id":687,"product_name":688,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":331},51204,"nest_wifi_pro",{"id":690,"product_name":691,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":331},51205,"nest_wifi_pro_firmware",{"id":693,"product_name":694,"version_count":637,"cve_count":114,"kev_count":41,"last_cve_update":695},51208,"news_and_weather","2017-07-19",{"id":697,"product_name":698,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":699},51209,"nexus_4","2017-09-26",{"id":701,"product_name":702,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":703},51212,"nexus_5x_firmware","2016-05-05",{"id":705,"product_name":706,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":703},51215,"nexus_6p_firmware",{"id":708,"product_name":709,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":58},51218,"nexus_7_firmware",{"id":711,"product_name":712,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":58},51220,"nexus_9_firmware",{"id":714,"product_name":715,"version_count":66,"cve_count":114,"kev_count":41,"last_cve_update":716},51222,"nftables","2024-07-03",{"id":718,"product_name":719,"version_count":127,"cve_count":114,"kev_count":41,"last_cve_update":720},51224,"openthread","2020-04-28",{"id":722,"product_name":723,"version_count":34,"cve_count":114,"kev_count":41,"last_cve_update":724},51225,"osv-scalibr","2025-06-18",{"id":726,"product_name":727,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":728},51226,"pdfium","2017-10-18",{"id":730,"product_name":731,"version_count":732,"cve_count":114,"kev_count":41,"last_cve_update":530},51227,"perfetto",31,{"id":734,"product_name":735,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":331},51259,"pixel_watch",{"id":737,"product_name":738,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":331},51260,"pixel_watch_firmware",{"id":740,"product_name":741,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":742},51262,"play_services_sdk","2015-02-23",{"id":744,"product_name":745,"version_count":746,"cve_count":114,"kev_count":41,"last_cve_update":747},51264,"protobuf-cpp",82,"2022-09-22",{"id":749,"product_name":750,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":146},51272,"reverb",{"id":752,"product_name":753,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":754},51273,"sa360_webquery_to_bigquery_exporter","2022-03-18",{"id":756,"product_name":757,"version_count":758,"cve_count":114,"kev_count":41,"last_cve_update":759},51275,"santa",41,"2018-06-13",{"id":761,"product_name":762,"version_count":763,"cve_count":114,"kev_count":41,"last_cve_update":764},51277,"search_appliance_software",14,"2014-05-08",{"id":766,"product_name":767,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":768},51278,"secret_manager_provider_for_secret_store_csi_driver","2021-01-21",{"id":770,"product_name":771,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":48},51281,"sfntly",{"id":773,"product_name":774,"version_count":775,"cve_count":114,"kev_count":41,"last_cve_update":776},51282,"site_kit",104,"2023-07-07",{"id":778,"product_name":779,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":780},51285,"skia","2017-04-13",{"id":782,"product_name":783,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":784},51286,"slashify","2021-02-19",{"id":786,"product_name":787,"version_count":34,"cve_count":114,"kev_count":41,"last_cve_update":788},51287,"slo_generator","2021-10-04",{"id":790,"product_name":791,"version_count":114,"cve_count":114,"kev_count":41,"last_cve_update":792},51288,"snappy","2019-04-24",{"id":794,"product_name":795,"version_count":796,"cve_count":114,"kev_count":41,"last_cve_update":797},51294,"tink_c\\+\\+",20,"2024-05-21",{"id":799,"product_name":800,"version_count":166,"cve_count":114,"kev_count":41,"last_cve_update":801},51296,"tink_java","2020-10-19",{"id":803,"product_name":804,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":805},51297,"titan_security_key","2021-01-07",{"id":807,"product_name":808,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":809},51307,"voice_builder","2019-07-23",{"id":811,"product_name":812,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":813},51308,"web_designer","2025-06-12",{"id":815,"product_name":816,"version_count":41,"cve_count":114,"kev_count":41,"last_cve_update":664},51312,"wifi",{"id":818,"product_name":819,"version_count":86,"cve_count":114,"kev_count":41,"last_cve_update":664},51313,"wifi_firmware",{"id":821,"product_name":822,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51141,"googlebot",null,{"id":825,"product_name":826,"version_count":77,"cve_count":41,"kev_count":41,"last_cve_update":823},51293,"tink",{"id":828,"product_name":829,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51054,"admin",{"id":831,"product_name":832,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51126,"firebase_javascript_sdk",{"id":834,"product_name":835,"version_count":52,"cve_count":41,"kev_count":41,"last_cve_update":823},51295,"tink_go",{"id":837,"product_name":838,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51124,"firebase_cloud_messaging",{"id":840,"product_name":841,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51309,"web_server",{"id":843,"product_name":844,"version_count":118,"cve_count":41,"kev_count":41,"last_cve_update":823},51117,"earth_plug-in",{"id":846,"product_name":847,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51109,"container-optimized_os",{"id":849,"product_name":850,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51108,"cloud_platform",{"id":852,"product_name":853,"version_count":53,"cve_count":41,"kev_count":41,"last_cve_update":823},51106,"cloud_looker",{"id":855,"product_name":856,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51097,"chromecast_rux-j42",{"id":858,"product_name":859,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51270,"quick_share",{"id":861,"product_name":862,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51096,"chromecast_nc2-6a5-d",{"id":864,"product_name":865,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51071,"apps_migration_for_microsoft_exchange",{"id":867,"product_name":868,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51091,"chromecast_ga00439",{"id":870,"product_name":871,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51274,"safearchive",{"id":873,"product_name":874,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51299,"toolbar_for_firefox",{"id":876,"product_name":877,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51095,"chromecast_nc2-6a5",{"id":879,"product_name":880,"version_count":96,"cve_count":41,"kev_count":41,"last_cve_update":823},51300,"toolbar_for_internet_explorer",{"id":882,"product_name":883,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51086,"centipede",{"id":885,"product_name":886,"version_count":887,"cve_count":41,"kev_count":41,"last_cve_update":823},51279,"security_operations_soar",101,{"id":889,"product_name":890,"version_count":891,"cve_count":41,"kev_count":41,"last_cve_update":823},51280,"sentencepiece",24,{"id":893,"product_name":894,"version_count":118,"cve_count":41,"kev_count":41,"last_cve_update":823},51302,"update_helper",{"id":896,"product_name":897,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51084,"car",{"id":899,"product_name":900,"version_count":775,"cve_count":41,"kev_count":41,"last_cve_update":823},51283,"site_kit_by_google",{"id":902,"product_name":903,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51094,"chromecast_nc2-645b",{"id":905,"product_name":906,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51304,"urchin",{"id":908,"product_name":909,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51083,"calendar",{"id":911,"product_name":912,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51306,"vertex_gemini_api",{"id":914,"product_name":915,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51063,"android_sdk_tools",{"id":917,"product_name":918,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51093,"chromecast_h2g2-42",{"id":920,"product_name":921,"version_count":238,"cve_count":41,"kev_count":41,"last_cve_update":823},51290,"talk_plugin",{"id":923,"product_name":924,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51092,"chromecast_ga3a00403a14",{"id":926,"product_name":927,"version_count":928,"cve_count":41,"kev_count":41,"last_cve_update":823},51292,"tensorflow_serving",81,{"id":930,"product_name":931,"version_count":86,"cve_count":41,"kev_count":41,"last_cve_update":823},51207,"nest_wifi_router_firmware",{"id":933,"product_name":934,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51206,"nest_wifi_router",{"id":936,"product_name":937,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51193,"nest_doorbell_\\\\(battery\\\\)_firmware",{"id":939,"product_name":940,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51192,"nest_doorbell_\\\\(battery\\\\)",{"id":942,"product_name":943,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51191,"nest_cam_with_floodlight_firmware",{"id":945,"product_name":946,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51190,"nest_cam_with_floodlight",{"id":948,"product_name":949,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51189,"nest_cam_\\\\(outdoor_or_indoor\\\\,_battery\\\\)_firmware",{"id":951,"product_name":952,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51188,"nest_cam_\\\\(outdoor_or_indoor\\\\,_battery\\\\)",{"id":954,"product_name":955,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51184,"nest_cam_\\\\(indoor\\\\,_wired\\\\)_firmware",{"id":957,"product_name":958,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51183,"nest_cam_\\\\(indoor\\\\,_wired\\\\)",{"id":960,"product_name":961,"version_count":66,"cve_count":41,"kev_count":41,"last_cve_update":823},51175,"migrate_to_containers",{"id":963,"product_name":964,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51171,"kubernetes",{"id":966,"product_name":967,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51158,"goolge_classroom",{"id":969,"product_name":970,"version_count":67,"cve_count":41,"kev_count":41,"last_cve_update":823},51157,"google_test",{"id":972,"product_name":973,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51155,"google_sites",{"id":975,"product_name":976,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51151,"google_meet",{"id":978,"product_name":979,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51149,"google_drive",{"id":981,"product_name":982,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51148,"google_docs",{"id":984,"product_name":985,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51145,"google_classroom",{"id":987,"product_name":988,"version_count":41,"cve_count":41,"kev_count":41,"last_cve_update":823},51144,"google_chat",{"id":990,"product_name":991,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51143,"google_chart_server",{"id":993,"product_name":994,"version_count":114,"cve_count":41,"kev_count":41,"last_cve_update":823},51142,"googlebot-image","Google is a technology vendor with 261 tracked products and 13072 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[997,1005,1011,1020,1025,1030,1037,1042,1047,1053],{"cveId":998,"description":999,"publishedDate":1000,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1004},"CVE-2011-0611","Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.","2011-04-13",8.8,"v3.1","High",0.9941,{"cveId":1006,"description":1007,"publishedDate":1008,"cvssScore":1009,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1010},"CVE-2012-0754","Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","2012-02-16",8.1,0.91085,{"cveId":1012,"description":1013,"publishedDate":1014,"cvssScore":1015,"cvssVersion":1016,"severity":1017,"isKev":1018,"epssScore":1019},"CVE-2012-0779","Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an \"object confusion vulnerability,\" as exploited in the wild in May 2012.","2012-05-04",9.3,"v2","Critical",false,0.87085,{"cveId":1021,"description":1022,"publishedDate":1023,"cvssScore":238,"cvssVersion":1016,"severity":1017,"isKev":1018,"epssScore":1024},"CVE-2011-2110","Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.","2011-06-16",0.86421,{"cveId":1026,"description":1027,"publishedDate":1028,"cvssScore":238,"cvssVersion":1016,"severity":1017,"isKev":1018,"epssScore":1029},"CVE-2011-2140","Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.","2011-08-10",0.82258,{"cveId":1031,"description":1032,"publishedDate":1033,"cvssScore":1034,"cvssVersion":1016,"severity":1035,"isKev":1018,"epssScore":1036},"CVE-2011-3389","The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.","2011-09-06",4.3,"Medium",0.73327,{"cveId":1038,"description":1039,"publishedDate":1008,"cvssScore":1040,"cvssVersion":1016,"severity":1035,"isKev":1018,"epssScore":1041},"CVE-2011-3026","Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.",6.8,0.72853,{"cveId":1043,"description":1044,"publishedDate":1045,"cvssScore":1015,"cvssVersion":1016,"severity":1017,"isKev":1018,"epssScore":1046},"CVE-2010-3654","Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.","2010-10-29",0.69679,{"cveId":1048,"description":1049,"publishedDate":1050,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1052},"CVE-2011-0609","Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.","2011-03-15",7.8,0.63507,{"cveId":1054,"description":1055,"publishedDate":1056,"cvssScore":1015,"cvssVersion":1016,"severity":1017,"isKev":1018,"epssScore":1057},"CVE-2010-1807","WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related to non-standard NaN representation.","2010-09-10",0.61319,[1059,1068,1077,1084,1091,1099,1106,1114,1122,1131,1140,1150,1160,1167,1175,1182,1189,1195,1202,1210,1217,1223,1229,1237,1243,1251,1258,1266,1274,1282,1290,1295,1303,1311,1317,1324,1332,1338,1346,1352,1359,1366,1374,1382,1390,1398,1405,1411,1418,1425,1431,1438,1442,1445,1451,1458,1467,1474,1481,1489,1495,1502,1509,1516,1522,1530,1536,1543,1551,1558,1566,1572,1574,1581,1588,1595,1602,1609,1616,1623,1629,1636,1643,1649,1653,1658,1665,1670,1674,1680,1684,1690,1696,1703,1710,1717,1722,1728,1732,1739,1745,1751,1757],{"cveId":1060,"description":1061,"publishedDate":1062,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1063,"cisaVulnName":1064,"cisaDateAdded":1065,"cisaShortDescription":1066,"cisaRequiredAction":1067},"CVE-2026-58704","In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal\u002Fadjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2026-09-15",0.00625,"Google Pixel Improper Authorization Vulnerability","2026-09-16","Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":1069,"description":1070,"publishedDate":1071,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1072,"cisaVulnName":1073,"cisaDateAdded":1074,"cisaShortDescription":1075,"cisaRequiredAction":1076},"CVE-2025-48633","In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2025-12-08",0.00262,"Android Framework Information Disclosure Vulnerability","2025-12-02","Android Framework contains an unspecified vulnerability that allows for information disclosure.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":1078,"description":1079,"publishedDate":28,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1080,"cisaVulnName":1081,"cisaDateAdded":1082,"cisaShortDescription":1083,"cisaRequiredAction":1076},"CVE-2025-10585","Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",0.08974,"Google Chromium V8 Type Confusion Vulnerability","2025-09-23","Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.",{"cveId":1085,"description":1086,"publishedDate":1087,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1088,"cisaVulnName":1089,"cisaDateAdded":1087,"cisaShortDescription":1090,"cisaRequiredAction":1076},"CVE-2025-48543","In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2025-09-04",0.00634,"Android Runtime Use-After-Free Vulnerability","Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.",{"cveId":1092,"description":1093,"publishedDate":1094,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1095,"cisaVulnName":1096,"cisaDateAdded":1097,"cisaShortDescription":1098,"cisaRequiredAction":1076},"CVE-2025-6558","Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2025-07-15",0.10927,"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","2025-07-22","Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1100,"description":1101,"publishedDate":1102,"cvssScore":1009,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1103,"cisaVulnName":1081,"cisaDateAdded":1104,"cisaShortDescription":1105,"cisaRequiredAction":1076},"CVE-2025-6554","Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. (Chromium security severity: High)","2025-06-30",0.14142,"2025-07-02","Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read\u002Fwrite via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1107,"description":1108,"publishedDate":1109,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1110,"cisaVulnName":1111,"cisaDateAdded":1112,"cisaShortDescription":1113,"cisaRequiredAction":1076},"CVE-2025-5419","Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2025-06-03",0.07821,"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","2025-06-05","Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1115,"description":1116,"publishedDate":1117,"cvssScore":1034,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1118,"cisaVulnName":1119,"cisaDateAdded":1120,"cisaShortDescription":1121,"cisaRequiredAction":1076},"CVE-2025-4664","Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)","2025-05-14",0.05431,"Google Chromium Loader Insufficient Policy Enforcement Vulnerability","2025-05-15","Google Chromium contains an insufficient policy enforcement vulnerability that allows a remote attacker to leak cross-origin data via a crafted HTML page.",{"cveId":1123,"description":1124,"publishedDate":1125,"cvssScore":1126,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1127,"cisaVulnName":1128,"cisaDateAdded":1129,"cisaShortDescription":1130,"cisaRequiredAction":1076},"CVE-2025-2783","Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","2025-03-26",8.3,0.09238,"Google Chromium Mojo Sandbox Escape Vulnerability","2025-03-27","Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1132,"description":1133,"publishedDate":1134,"cvssScore":1135,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1136,"cisaVulnName":1137,"cisaDateAdded":1138,"cisaShortDescription":1139,"cisaRequiredAction":1076},"CVE-2024-50302","In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: zero-initialize the report buffer\n\nSince the report buffer is used by all kinds of drivers in various ways, let's\nzero-initialize it during allocation to make sure that it can't be ever used\nto leak kernel memory via specially-crafted report.","2024-11-19",5.5,0.00811,"Linux Kernel Use of Uninitialized Resource Vulnerability","2025-03-04","The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.",{"cveId":1141,"description":1142,"publishedDate":1143,"cvssScore":1144,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1145,"cisaVulnName":1146,"cisaDateAdded":1147,"cisaShortDescription":1148,"cisaRequiredAction":1149},"CVE-2024-43093","In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to  incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","2024-11-13",7.3,0.00709,"Android Framework Privilege Escalation Vulnerability","2024-11-07","Android Framework contains an unspecified vulnerability that allows for privilege escalation.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":1151,"description":1152,"publishedDate":1153,"cvssScore":1154,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1155,"cisaVulnName":1156,"cisaDateAdded":1157,"cisaShortDescription":1158,"cisaRequiredAction":1159},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",9.8,0.99879,"Adobe Flash Player Integer Underflow Vulnerablity","2024-09-17","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":1161,"description":1162,"publishedDate":1163,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1164,"cisaVulnName":1165,"cisaDateAdded":1157,"cisaShortDescription":1166,"cisaRequiredAction":1159},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24817,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":1168,"description":1169,"publishedDate":1170,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1171,"cisaVulnName":1172,"cisaDateAdded":1173,"cisaShortDescription":1174,"cisaRequiredAction":1149},"CVE-2024-7965","Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2024-08-21",0.18528,"Google Chromium V8 Inappropriate Implementation Vulnerability","2024-08-28","Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1176,"description":1177,"publishedDate":1170,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1179,"cisaVulnName":1081,"cisaDateAdded":1180,"cisaShortDescription":1181,"cisaRequiredAction":1149},"CVE-2024-7971","Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",9.6,0.21009,"2024-08-26","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1183,"description":1184,"publishedDate":1185,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1186,"cisaVulnName":1187,"cisaDateAdded":1185,"cisaShortDescription":1188,"cisaRequiredAction":1149},"CVE-2024-32896","there is a possible way to bypass  due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.","2024-06-13",0.02985,"Android Pixel Privilege Escalation Vulnerability","Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.",{"cveId":1190,"description":1191,"publishedDate":1192,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1193,"cisaVulnName":1081,"cisaDateAdded":1192,"cisaShortDescription":1194,"cisaRequiredAction":1149},"CVE-2024-5274","Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)","2024-05-28",0.0773,"Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1196,"description":1197,"publishedDate":1198,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1199,"cisaVulnName":1081,"cisaDateAdded":1200,"cisaShortDescription":1201,"cisaRequiredAction":1149},"CVE-2024-4947","Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)","2024-05-15",0.15236,"2024-05-20","Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.",{"cveId":1203,"description":1204,"publishedDate":1205,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1206,"cisaVulnName":1207,"cisaDateAdded":1208,"cisaShortDescription":1209,"cisaRequiredAction":1149},"CVE-2024-4761","Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)","2024-05-14",0.11007,"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","2024-05-16","Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. ",{"cveId":1211,"description":1212,"publishedDate":1205,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1213,"cisaVulnName":1214,"cisaDateAdded":1215,"cisaShortDescription":1216,"cisaRequiredAction":1149},"CVE-2024-4671","Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)",0.08348,"Google Chromium Visuals Use-After-Free Vulnerability","2024-05-13","Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1218,"description":1184,"publishedDate":1219,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1220,"cisaVulnName":1187,"cisaDateAdded":1221,"cisaShortDescription":1222,"cisaRequiredAction":1149},"CVE-2024-29748","2024-04-05",0.00676,"2024-04-04","Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app.",{"cveId":1224,"description":1225,"publishedDate":1219,"cvssScore":1135,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1226,"cisaVulnName":1227,"cisaDateAdded":1221,"cisaShortDescription":1228,"cisaRequiredAction":1149},"CVE-2024-29745","there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",0.00486,"Android Pixel Information Disclosure Vulnerability","Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices.",{"cveId":1230,"description":1231,"publishedDate":1232,"cvssScore":1135,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1233,"cisaVulnName":1234,"cisaDateAdded":1235,"cisaShortDescription":1236,"cisaRequiredAction":1149},"CVE-2023-21237","In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912","2023-06-28",0.00266,"Android Pixel Information Disclosure Vulnerability ","2024-03-05","Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.",{"cveId":1238,"description":1239,"publishedDate":1240,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1241,"cisaVulnName":1081,"cisaDateAdded":1242,"cisaShortDescription":1194,"cisaRequiredAction":1149},"CVE-2023-4762","Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)","2023-09-05",0.41375,"2024-02-06",{"cveId":1244,"description":1245,"publishedDate":1246,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1247,"cisaVulnName":1248,"cisaDateAdded":1249,"cisaShortDescription":1250,"cisaRequiredAction":1149},"CVE-2024-0519","Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2024-01-16",0.03802,"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","2024-01-17","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1252,"description":1253,"publishedDate":1254,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1255,"cisaVulnName":1256,"cisaDateAdded":331,"cisaShortDescription":1257,"cisaRequiredAction":1149},"CVE-2023-7024","Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-12-21",0.06671,"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.",{"cveId":1259,"description":1260,"publishedDate":1261,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1262,"cisaVulnName":1263,"cisaDateAdded":1264,"cisaShortDescription":1265,"cisaRequiredAction":1149},"CVE-2023-6345","Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)","2023-11-29",0.16468,"Google Skia Integer Overflow Vulnerability","2023-11-30","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":1267,"description":1268,"publishedDate":1269,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1270,"cisaVulnName":1271,"cisaDateAdded":1272,"cisaShortDescription":1273,"cisaRequiredAction":1149},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":1275,"description":1276,"publishedDate":1277,"cvssScore":127,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1278,"cisaVulnName":1279,"cisaDateAdded":1280,"cisaShortDescription":1281,"cisaRequiredAction":1149},"CVE-2022-22265","An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.","2022-01-10",0.00389,"Samsung Mobile Devices Use-After-Free Vulnerability","2023-09-18","Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution.",{"cveId":1283,"description":1284,"publishedDate":1285,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1286,"cisaVulnName":1287,"cisaDateAdded":1288,"cisaShortDescription":1289,"cisaRequiredAction":1149},"CVE-2023-4863","Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)","2023-09-12",0.99979,"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","2023-09-13","Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.",{"cveId":1291,"description":1292,"publishedDate":1293,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1294,"cisaVulnName":1146,"cisaDateAdded":1288,"cisaShortDescription":1148,"cisaRequiredAction":1149},"CVE-2023-35674","In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","2023-09-11",0.02636,{"cveId":1296,"description":1297,"publishedDate":1298,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1299,"cisaVulnName":1081,"cisaDateAdded":1300,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2023-3079","Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-06-05",0.37858,"2023-06-07","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","Apply updates per vendor instructions.",{"cveId":1304,"description":1305,"publishedDate":1306,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1307,"cisaVulnName":1308,"cisaDateAdded":1309,"cisaShortDescription":1310,"cisaRequiredAction":1302},"CVE-2023-2136","Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2023-04-19",0.05739,"Google Chrome Skia Integer Overflow Vulnerability","2023-04-21","Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.",{"cveId":1312,"description":1313,"publishedDate":1314,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1315,"cisaVulnName":1081,"cisaDateAdded":1316,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2023-2033","Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-04-14",0.40798,"2023-04-17",{"cveId":1318,"description":1319,"publishedDate":1320,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1321,"cisaVulnName":1146,"cisaDateAdded":1322,"cisaShortDescription":1323,"cisaRequiredAction":1302},"CVE-2023-20963","In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519","2023-03-24",0.01465,"2023-04-13","Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.",{"cveId":1325,"description":1326,"publishedDate":1327,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1328,"cisaVulnName":1329,"cisaDateAdded":1330,"cisaShortDescription":1331,"cisaRequiredAction":1302},"CVE-2022-3038","Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-09-26",0.24925,"Google Chromium Network Service Use-After-Free Vulnerability","2023-03-30","Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1333,"description":1334,"publishedDate":1335,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1336,"cisaVulnName":1081,"cisaDateAdded":1337,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2022-4262","Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2022-12-02",0.2351,"2022-12-05",{"cveId":1339,"description":1340,"publishedDate":1341,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1342,"cisaVulnName":1343,"cisaDateAdded":1344,"cisaShortDescription":1345,"cisaRequiredAction":1302},"CVE-2022-4135","Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)","2022-11-25",0.31864,"Google Chromium GPU Heap Buffer Overflow Vulnerability","2022-11-28","Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1347,"description":1348,"publishedDate":1349,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1350,"cisaVulnName":1081,"cisaDateAdded":1351,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2022-3723","Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2022-11-01",0.07921,"2022-10-28",{"cveId":1353,"description":1354,"publishedDate":1327,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1355,"cisaVulnName":1356,"cisaDateAdded":1357,"cisaShortDescription":1358,"cisaRequiredAction":1302},"CVE-2022-3075","Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",0.05846,"Google Chromium Mojo Insufficient Data Validation Vulnerability","2022-09-08","Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1360,"description":1361,"publishedDate":1362,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1363,"cisaVulnName":1364,"cisaDateAdded":1357,"cisaShortDescription":1365,"cisaRequiredAction":1302},"CVE-2011-1823","The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.","2011-06-09",0.41367,"Android OS Privilege Escalation Vulnerability","The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.",{"cveId":1367,"description":1368,"publishedDate":1369,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1370,"cisaVulnName":1371,"cisaDateAdded":1372,"cisaShortDescription":1373,"cisaRequiredAction":1302},"CVE-2022-2294","Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-28",0.70833,"WebRTC Heap Buffer Overflow Vulnerability","2022-08-25","WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.",{"cveId":1375,"description":1376,"publishedDate":1327,"cvssScore":1377,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1378,"cisaVulnName":1379,"cisaDateAdded":1380,"cisaShortDescription":1381,"cisaRequiredAction":1302},"CVE-2022-2856","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.",6.5,0.04561,"Google Chromium Intents Insufficient Input Validation Vulnerability","2022-08-18","Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1383,"description":1384,"publishedDate":1385,"cvssScore":1377,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1386,"cisaVulnName":1387,"cisaDateAdded":1388,"cisaShortDescription":1389,"cisaRequiredAction":1302},"CVE-2021-30533","Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.","2021-06-07",0.16742,"Google Chromium PopupBlocker Security Bypass Vulnerability","2022-06-27","Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1391,"description":1392,"publishedDate":1393,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1394,"cisaVulnName":1395,"cisaDateAdded":1396,"cisaShortDescription":1397,"cisaRequiredAction":1302},"CVE-2016-5198","V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read\u002Fwrite operations, leading to code execution, via a crafted HTML page.","2017-01-19",0.34164,"Google Chromium V8 Out-of-Bounds Memory Vulnerability","2022-06-08","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read\u002Fwrite operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1399,"description":1400,"publishedDate":1401,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1402,"cisaVulnName":1403,"cisaDateAdded":1396,"cisaShortDescription":1404,"cisaRequiredAction":1302},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2017-04-24",0.40635,"Google Chromium V8 Memory Corruption Vulnerability","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1406,"description":1407,"publishedDate":1408,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1409,"cisaVulnName":1081,"cisaDateAdded":1396,"cisaShortDescription":1410,"cisaRequiredAction":1302},"CVE-2017-5070","Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2017-10-27",0.32071,"Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1412,"description":1413,"publishedDate":1414,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1415,"cisaVulnName":1416,"cisaDateAdded":1396,"cisaShortDescription":1417,"cisaRequiredAction":1302},"CVE-2018-17463","Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2018-11-14",0.84564,"Google Chromium V8 Remote Code Execution Vulnerability","Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1419,"description":1420,"publishedDate":1421,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1422,"cisaVulnName":1423,"cisaDateAdded":1396,"cisaShortDescription":1424,"cisaRequiredAction":1302},"CVE-2018-17480","Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2018-12-11",0.3564,"Google Chromium V8 Out-of-Bounds Write Vulnerability","Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1426,"description":1427,"publishedDate":1414,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1428,"cisaVulnName":1429,"cisaDateAdded":1396,"cisaShortDescription":1430,"cisaRequiredAction":1302},"CVE-2018-6065","Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.60304,"Google Chromium V8 Integer Overflow Vulnerability","Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1432,"description":1433,"publishedDate":1434,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1435,"cisaVulnName":1436,"cisaDateAdded":1396,"cisaShortDescription":1437,"cisaRequiredAction":1302},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",0.4811,"Google Chromium V8 Out-of-Bounds Read Vulnerability","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1006,"description":1007,"publishedDate":1008,"cvssScore":1009,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1010,"cisaVulnName":1439,"cisaDateAdded":1396,"cisaShortDescription":1440,"cisaRequiredAction":1441},"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":1048,"description":1049,"publishedDate":1050,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1052,"cisaVulnName":1443,"cisaDateAdded":1396,"cisaShortDescription":1444,"cisaRequiredAction":1441},"Adobe Flash Player Unspecified Vulnerability","Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).",{"cveId":1446,"description":1447,"publishedDate":1448,"cvssScore":1377,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1449,"cisaVulnName":1423,"cisaDateAdded":1396,"cisaShortDescription":1450,"cisaRequiredAction":1302},"CVE-2019-5825","Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2019-11-25",0.55925,"Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1452,"description":1453,"publishedDate":1008,"cvssScore":1454,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1455,"cisaVulnName":1456,"cisaDateAdded":1396,"cisaShortDescription":1457,"cisaRequiredAction":1441},"CVE-2012-0767","Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS),\" as exploited in the wild in February 2012.",6.1,0.06187,"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.",{"cveId":1459,"description":1460,"publishedDate":1461,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1462,"cisaVulnName":1463,"cisaDateAdded":1464,"cisaShortDescription":1465,"cisaRequiredAction":1466},"CVE-2016-1010","Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.","2016-03-12",0.19333,"Adobe Flash Player and AIR Integer Overflow Vulnerability","2022-05-25","Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.","The impacted products are end-of-life and should be disconnected if still in use.",{"cveId":1468,"description":1469,"publishedDate":1470,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1471,"cisaVulnName":1472,"cisaDateAdded":1464,"cisaShortDescription":1473,"cisaRequiredAction":1441},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67698,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":1475,"description":1476,"publishedDate":1477,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1478,"cisaVulnName":1479,"cisaDateAdded":1464,"cisaShortDescription":1480,"cisaRequiredAction":1466},"CVE-2016-0984","Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0973, CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, and CVE-2016-0983.","2016-02-10",0.54544,"Adobe Flash Player and AIR Use-After-Free Vulnerability","Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.",{"cveId":1482,"description":1483,"publishedDate":1484,"cvssScore":1154,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1485,"cisaVulnName":1486,"cisaDateAdded":1487,"cisaShortDescription":1488,"cisaRequiredAction":1441},"CVE-2018-5002","Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","2018-07-09",0.25059,"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.",{"cveId":1490,"description":1491,"publishedDate":1448,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1492,"cisaVulnName":1493,"cisaDateAdded":1487,"cisaShortDescription":1494,"cisaRequiredAction":1302},"CVE-2019-13720","Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.49421,"Google Chrome WebAudio Use-After-Free Vulnerability","Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.",{"cveId":1496,"description":1497,"publishedDate":1498,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1499,"cisaVulnName":1500,"cisaDateAdded":1487,"cisaShortDescription":1501,"cisaRequiredAction":1302},"CVE-2021-1048","In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204573007References: Upstream kernel","2021-12-15",0.01058,"Android Kernel Use-After-Free Vulnerability","Android kernel contains a use-after-free vulnerability that allows for privilege escalation.",{"cveId":1503,"description":1504,"publishedDate":1505,"cvssScore":1377,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1506,"cisaVulnName":1507,"cisaDateAdded":1487,"cisaShortDescription":1508,"cisaRequiredAction":1302},"CVE-2019-5786","Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.","2019-06-27",0.61085,"Google Chrome Blink Use-After-Free Vulnerability","Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.",{"cveId":1510,"description":1511,"publishedDate":1498,"cvssScore":1512,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1513,"cisaVulnName":1514,"cisaDateAdded":1487,"cisaShortDescription":1515,"cisaRequiredAction":1302},"CVE-2021-0920","In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel",6.4,0.00867,"Android Kernel Race Condition Vulnerability","Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.",{"cveId":1517,"description":1518,"publishedDate":1519,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1520,"cisaVulnName":1081,"cisaDateAdded":1521,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2022-1364","Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-26",0.13921,"2022-04-15",{"cveId":1523,"description":1524,"publishedDate":1525,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1526,"cisaVulnName":1527,"cisaDateAdded":1528,"cisaShortDescription":1529,"cisaRequiredAction":1302},"CVE-2021-39793","In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N\u002FA","2022-03-16",0.00685,"Google Pixel Out-of-Bounds Write Vulnerability","2022-04-11","Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.",{"cveId":1531,"description":1532,"publishedDate":1533,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1534,"cisaVulnName":1081,"cisaDateAdded":1535,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2022-1096","Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-07-23",0.24726,"2022-03-28",{"cveId":1537,"description":1538,"publishedDate":1539,"cvssScore":1540,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1541,"cisaVulnName":1439,"cisaDateAdded":1535,"cisaShortDescription":1542,"cisaRequiredAction":1441},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",7.5,0.07713,"Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":1544,"description":1545,"publishedDate":1546,"cvssScore":1154,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1547,"cisaVulnName":1548,"cisaDateAdded":1549,"cisaShortDescription":1550,"cisaRequiredAction":1441},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","2016-06-16",0.20055,"Adobe Flash Player Remote Code Execution Vulnerability","2022-03-25","Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":1552,"description":1553,"publishedDate":1554,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1555,"cisaVulnName":1556,"cisaDateAdded":1549,"cisaShortDescription":1557,"cisaRequiredAction":1441},"CVE-2016-7892","Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitation could lead to arbitrary code execution.","2016-12-15",0.18786,"Adobe Flash Player Use-After-Free Vulnerability","Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.",{"cveId":1559,"description":1560,"publishedDate":1561,"cvssScore":1154,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1562,"cisaVulnName":1563,"cisaDateAdded":1564,"cisaShortDescription":1565,"cisaRequiredAction":1441},"CVE-2016-1019","Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.","2016-04-07",0.22316,"Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.",{"cveId":1567,"description":1568,"publishedDate":1569,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1570,"cisaVulnName":1556,"cisaDateAdded":1564,"cisaShortDescription":1571,"cisaRequiredAction":1441},"CVE-2016-7855","Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.","2016-11-01",0.25198,"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.",{"cveId":998,"description":999,"publishedDate":1000,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1004,"cisaVulnName":1548,"cisaDateAdded":1564,"cisaShortDescription":1573,"cisaRequiredAction":1441},"Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.",{"cveId":1575,"description":1576,"publishedDate":1577,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1578,"cisaVulnName":1579,"cisaDateAdded":1564,"cisaShortDescription":1580,"cisaRequiredAction":1441},"CVE-2017-11292","Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.","2017-10-22",0.11885,"Adobe Flash Player Type Confusion Vulnerability","Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.",{"cveId":1582,"description":1583,"publishedDate":1584,"cvssScore":1154,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1585,"cisaVulnName":1556,"cisaDateAdded":1586,"cisaShortDescription":1587,"cisaRequiredAction":1441},"CVE-2018-15982","Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","2019-01-18",0.89581,"2022-02-15","Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability",{"cveId":1589,"description":1590,"publishedDate":1591,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1592,"cisaVulnName":1593,"cisaDateAdded":1586,"cisaShortDescription":1594,"cisaRequiredAction":1302},"CVE-2022-0609","Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-04-05",0.22442,"Google Chromium Animation Use-After-Free Vulnerability","Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1596,"description":1597,"publishedDate":1598,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1599,"cisaVulnName":1600,"cisaDateAdded":1277,"cisaShortDescription":1601,"cisaRequiredAction":1302},"CVE-2020-6572","Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.","2021-01-14",0.10586,"Google Chrome Media Use-After-Free Vulnerability","Google Chrome Media contains a use-after-free vulnerability that allows a remote attacker to execute code via a crafted HTML page.",{"cveId":1603,"description":1604,"publishedDate":1605,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1606,"cisaVulnName":1607,"cisaDateAdded":1498,"cisaShortDescription":1608,"cisaRequiredAction":1302},"CVE-2021-4102","Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2022-02-11",0.07836,"Google Chromium V8 Use-After-Free Vulnerability","Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1610,"description":1611,"publishedDate":1612,"cvssScore":1154,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1613,"cisaVulnName":1556,"cisaDateAdded":1614,"cisaShortDescription":1615,"cisaRequiredAction":1441},"CVE-2018-4878","A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.","2018-02-06",0.9028,"2021-11-03","Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.",{"cveId":1617,"description":1618,"publishedDate":1619,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1620,"cisaVulnName":1621,"cisaDateAdded":1614,"cisaShortDescription":1622,"cisaRequiredAction":1302},"CVE-2021-37973","Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.","2021-10-08",0.11735,"Google Chromium Portals Use-After-Free Vulnerability","Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.",{"cveId":1624,"description":1625,"publishedDate":1619,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1626,"cisaVulnName":1627,"cisaDateAdded":1614,"cisaShortDescription":1628,"cisaRequiredAction":1302},"CVE-2021-30633","Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",0.3318,"Google Chromium Indexed DB API Use-After-Free Vulnerability","Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1630,"description":1631,"publishedDate":1632,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1633,"cisaVulnName":1634,"cisaDateAdded":1614,"cisaShortDescription":1635,"cisaRequiredAction":1302},"CVE-2020-16017","Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.","2021-01-08",0.0273,"Google Chrome Use-After-Free Vulnerability","Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.  ",{"cveId":1637,"description":1638,"publishedDate":1639,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1640,"cisaVulnName":1641,"cisaDateAdded":1614,"cisaShortDescription":1642,"cisaRequiredAction":1302},"CVE-2020-16010","Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.","2020-11-03",0.06363,"Google Chrome for Android UI Heap Buffer Overflow Vulnerability","Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.",{"cveId":1644,"description":1645,"publishedDate":1639,"cvssScore":1178,"cvssVersion":1002,"severity":1017,"isKev":4,"epssScore":1646,"cisaVulnName":1647,"cisaDateAdded":1614,"cisaShortDescription":1648,"cisaRequiredAction":1302},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.63894,"Google Chrome FreeType Heap Buffer Overflow Vulnerability","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.",{"cveId":1650,"description":1651,"publishedDate":1619,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1652,"cisaVulnName":1607,"cisaDateAdded":1614,"cisaShortDescription":1608,"cisaRequiredAction":1302},"CVE-2021-37975","Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.34887,{"cveId":1654,"description":1655,"publishedDate":1656,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1657,"cisaVulnName":1081,"cisaDateAdded":1614,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2021-30551","Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-06-15",0.64701,{"cveId":1659,"description":1660,"publishedDate":1661,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1662,"cisaVulnName":1663,"cisaDateAdded":1614,"cisaShortDescription":1664,"cisaRequiredAction":1302},"CVE-2021-30554","Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-07-02",0.07367,"Google Chromium WebGL Use-After-Free Vulnerability","Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1666,"description":1667,"publishedDate":1668,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1669,"cisaVulnName":1081,"cisaDateAdded":1614,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2021-30563","Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-08-03",0.09,{"cveId":1671,"description":1672,"publishedDate":1619,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1673,"cisaVulnName":1423,"cisaDateAdded":1614,"cisaShortDescription":1450,"cisaRequiredAction":1302},"CVE-2021-30632","Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.6319,{"cveId":1675,"description":1676,"publishedDate":1677,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1678,"cisaVulnName":1403,"cisaDateAdded":1614,"cisaShortDescription":1679,"cisaRequiredAction":1302},"CVE-2021-38003","Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-11-23",0.38573,"Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1681,"description":1682,"publishedDate":1639,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1683,"cisaVulnName":1081,"cisaDateAdded":1614,"cisaShortDescription":1301,"cisaRequiredAction":1302},"CVE-2020-16009","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.48293,{"cveId":1685,"description":1686,"publishedDate":1632,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1687,"cisaVulnName":1688,"cisaDateAdded":1614,"cisaShortDescription":1689,"cisaRequiredAction":1302},"CVE-2020-16013","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.02756,"Google Chromium V8 Incorrect Implementation Vulnerabililty","Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1691,"description":1692,"publishedDate":1693,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1694,"cisaVulnName":1081,"cisaDateAdded":1614,"cisaShortDescription":1695,"cisaRequiredAction":1302},"CVE-2020-6418","Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-02-27",0.78808,"Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1697,"description":1698,"publishedDate":1699,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1700,"cisaVulnName":1701,"cisaDateAdded":1614,"cisaShortDescription":1702,"cisaRequiredAction":1302},"CVE-2021-21148","Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-02-09",0.19968,"Google Chromium V8 Heap Buffer Overflow Vulnerability","Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1704,"description":1705,"publishedDate":1706,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1707,"cisaVulnName":1708,"cisaDateAdded":1614,"cisaShortDescription":1709,"cisaRequiredAction":1302},"CVE-2021-21166","Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-03-09",0.24027,"Google Chromium Race Condition Vulnerability","Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1711,"description":1712,"publishedDate":1713,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1714,"cisaVulnName":1715,"cisaDateAdded":1614,"cisaShortDescription":1716,"cisaRequiredAction":1302},"CVE-2021-21193","Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-03-16",0.0995,"Google Chromium Blink Use-After-Free Vulnerability","Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1718,"description":1719,"publishedDate":1720,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1721,"cisaVulnName":1715,"cisaDateAdded":1614,"cisaShortDescription":1716,"cisaRequiredAction":1302},"CVE-2021-21206","Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2021-04-26",0.09307,{"cveId":1723,"description":1724,"publishedDate":1720,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1725,"cisaVulnName":1726,"cisaDateAdded":1614,"cisaShortDescription":1727,"cisaRequiredAction":1302},"CVE-2021-21220","Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.70435,"Google Chromium V8 Improper Input Validation Vulnerability","Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1729,"description":1730,"publishedDate":1720,"cvssScore":1001,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1731,"cisaVulnName":1081,"cisaDateAdded":1614,"cisaShortDescription":1410,"cisaRequiredAction":1302},"CVE-2021-21224","Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",0.84173,{"cveId":1733,"description":1734,"publishedDate":1735,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1736,"cisaVulnName":1737,"cisaDateAdded":1614,"cisaShortDescription":1738,"cisaRequiredAction":1302},"CVE-2020-0041","In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel","2020-03-10",0.03246,"Android Kernel Out-of-Bounds Write Vulnerability","Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"cveId":1740,"description":1741,"publishedDate":1735,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1742,"cisaVulnName":1743,"cisaDateAdded":1614,"cisaShortDescription":1744,"cisaRequiredAction":1302},"CVE-2020-0069","In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754",0.0137,"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain \"AbstractEmu.\"",{"cveId":1746,"description":1747,"publishedDate":1748,"cvssScore":1051,"cvssVersion":1002,"severity":1003,"isKev":4,"epssScore":1749,"cisaVulnName":1500,"cisaDateAdded":1614,"cisaShortDescription":1750,"cisaRequiredAction":1302},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",0.72105,"Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"",{"cveId":1752,"description":1753,"publishedDate":1619,"cvssScore":1377,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1754,"cisaVulnName":1755,"cisaDateAdded":1614,"cisaShortDescription":1756,"cisaRequiredAction":1302},"CVE-2021-37976","Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.",0.19901,"Google Chromium Information Disclosure Vulnerability","Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":1758,"description":1759,"publishedDate":1677,"cvssScore":1454,"cvssVersion":1002,"severity":1035,"isKev":4,"epssScore":1760,"cisaVulnName":1761,"cisaDateAdded":1614,"cisaShortDescription":1762,"cisaRequiredAction":1302},"CVE-2021-38000","Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.",0.04948,"Google Chromium Intents Improper Input Validation Vulnerability","Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",[1764,1765,1766,1767,1768,1769,1770,1771,1772,1773],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":41,"last_cve_update":42},{"id":44,"product_name":45,"version_count":46,"cve_count":47,"kev_count":41,"last_cve_update":48},{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":41,"last_cve_update":54},{"id":56,"product_name":57,"version_count":41,"cve_count":34,"kev_count":41,"last_cve_update":58},{"id":60,"product_name":61,"version_count":41,"cve_count":34,"kev_count":41,"last_cve_update":62},{"id":64,"product_name":65,"version_count":66,"cve_count":67,"kev_count":41,"last_cve_update":68},{"id":70,"product_name":71,"version_count":34,"cve_count":72,"kev_count":41,"last_cve_update":73},{"title":1775,"metaDescription":1776,"keywords":1777,"structuredData":1778},"Google - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Google covering 261 products with 13072 tracked vulnerabilities including 19 critical and 71 high-severity issues and 102 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Google vulnerabilities, Google security, Google CVE, Google threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Google KEV, Google exploited vulnerabilities",{"@context":1779,"@type":1780,"name":1781,"description":1776,"url":1782},"https:\u002F\u002Fschema.org","Organization","Google","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fgoogle",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":1784,"apiVersion":1785},"2026-10-28T15:23:36.249Z","3.0"]