Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2014-7923

ICU: regexp engine missing look-behind expression range check

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Google Icu-project and 3 more
Products
Ubuntu Linux Chrome International Components For Unicode and 7 more
CVE-2014-7940

ICU: uninitialized value use in the collation component

The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Google Icu-project Redhat
Products
Chrome International Components For Unicode Rhel Extras
CVE-2011-4599

icu: Stack-based buffer overflow by canonicalizing the given localeID

Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.

CVSS 2.0 · 7.5 High EPSS 7.9% KEV · Not listed
Vendors
Icu-project Redhat
Products
International Components For Unicode Enterprise Linux
CVE-2017-15396

chromium-browser: stack overflow in v8

A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Google Icu-project and 1 more
Products
Debian Linux Chrome International Components For Unicode and 4 more