[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9nAD5FFhl5hNXN5qIeCVdaWY5UzM63cQlmQ5Pn__SDo":3,"g5a-risk:CVE-2014-6041":144},{"success":4,"data":5,"meta":142},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":37,"references":38,"referencesCount":86,"weaknesses":87,"weaknessesCount":37,"isActivelyExploited":91,"cisaInfo":15,"otxData":15,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":126,"notableEvents":127},"CVE-2014-6041","What is CVE-2014-6041?","The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \\u0000 character, as demonstrated by an onclick=\"window.open('\\u0000javascript: sequence to the Android Browser application 4.2.1 or a third-party web browser.","The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \\u0000 character, as ...","2014-09-02T10:55:04.73","2025-04-12T10:46:40.837",5.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,4.9,0.18278,[28,28,28,28,28,28,28],"Medium",[32],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"google","android_browser","4.2.1","cpe:2.3:a:google:android_browser:4.2.1:*:*:*:*:android:*:*",1,[39,44,48,52,55,59,63,67,70,72,74,76,78,80,82,84],{"url":40,"source":41,"tags":42},"http:\u002F\u002Fwww.rafayhackingarticles.net\u002F2014\u002F08\u002Fandroid-browser-same-origin-policy.html","Rafayhackingarticles",[43],"Exploit",{"url":45,"source":46,"tags":47},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F69548","Securityfocus",[],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fandroid.googlesource.com\u002Fplatform\u002Fexternal\u002Fwebkit\u002F+\u002F1368e05e8875f00e8d2529fe6050d08b55ea4d87","Googlesource",[],{"url":53,"source":50,"tags":54},"https:\u002F\u002Fandroid.googlesource.com\u002Fplatform\u002Fexternal\u002Fwebkit\u002F+\u002F7e4405a7a12750ee27325f065b9825c25b40598c",[],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fcommunity.rapid7.com\u002Fcommunity\u002Fmetasploit\u002Fblog\u002F2014\u002F09\u002F15\u002Fmajor-android-bug-is-a-privacy-disaster-cve-2014-6041","Rapid7",[],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F95693","Ibmcloud",[],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=8321185","Ycombinator",[],{"url":68,"source":65,"tags":69},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=8325807",[],{"url":40,"source":41,"tags":71},[43],{"url":45,"source":46,"tags":73},[],{"url":49,"source":50,"tags":75},[],{"url":53,"source":50,"tags":77},[],{"url":56,"source":57,"tags":79},[],{"url":60,"source":61,"tags":81},[],{"url":64,"source":65,"tags":83},[],{"url":68,"source":65,"tags":85},[],16,[88],{"id":89,"name":89,"description":90},"Unknown","CWE-264",false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2014-6041? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-6041, a medium severity cyber security vulnerability from 2014. The Android WebView in Android before 4.4 allows remote at...","CVE-2014-6041, CVE-2014-6041 vulnerability, CVE-2014-6041 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, google security, android_browser vulnerability","\u002Fwhat-is\u002Fcve-2014-6041",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-6041","Cybersecurity","CVE-2014-6041, CVE-2014-6041 vulnerability, CVE-2014-6041 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":15,"Negate":15,"Nodes":120},[121],{"Operator":122,"Negate":15,"CPEMatch":123},"OR",[124],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":125,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AA9C2521-2BD1-4E27-BB52-7290E43D6F18",[],[128,135],{"id":129,"eventType":130,"eventTime":131,"details":132,"label":133,"color":134},"271ad232-580f-4238-857f-46970599e350","LOW_EPSS_DELTA","2025-10-09T04:07:09.703904+00:00","Daily EPSS score decreased by 0.186 on 2023-12-30","EPSS Score Decreased","green",{"id":136,"eventType":137,"eventTime":138,"details":139,"label":140,"color":141},"4df26a9f-8371-482b-ab6e-8093bd27abe3","HIGH_EPSS_DELTA","2025-10-10T04:07:07.626214+00:00","Daily EPSS score increased by 0.177 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":143,"version":21},1793221617438,{"score":145,"band":30,"action":146,"scoredAt":147},40,"Plan remediation","2026-10-28T06:38:52.802544+00:00"]