{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T17:32:17.031Z",
  "tag": {
    "id": "google",
    "label": "Google",
    "isStack": false,
    "url": "https://pwn.watch/t/google",
    "feed": "https://pwn.watch/t/google/feed.xml"
  },
  "counts": {
    "incidents": 35,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 35
  },
  "incidents": [
    {
      "slug": "google-pixel-cve-2026-58704",
      "title": "Google Pixel: Google Pixel Improper Authorization Vulnerability",
      "url": "https://pwn.watch/i/google-pixel-cve-2026-58704",
      "json": "https://pwn.watch/i/google-pixel-cve-2026-58704.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Pixel",
      "tags": [
        "google",
        "cisa-kev",
        "pixel",
        "android"
      ],
      "cveIds": [
        "CVE-2026-58704"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-09-16",
      "closedAt": "2026-09-16",
      "updatedAt": "2026-09-16",
      "summary": "Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges. Added to CISA KEV on 2026-09-16.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-87491",
      "title": "Chrome zero-day CVE-2026-87491 (V8 OOB write)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-87491",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-87491.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium V8",
      "tags": [
        "google",
        "chrome",
        "zero-day",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-87491"
      ],
      "affectedVersions": [
        "Before 153.0.8010.36/.37"
      ],
      "fixedVersions": [
        "153.0.8010.36+",
        "153.0.8010.37+"
      ],
      "startedAt": "2026-09-09",
      "closedAt": "2026-09-09",
      "updatedAt": "2026-09-09",
      "summary": "September 9 2026 Chrome 153 patched CVE-2026-87491, a V8 out-of-bounds write Google said was exploited in the wild — the seventh Chrome zero-day of 2026. Fixed in 153.0.8010.36/.37. CISA KEV listed.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-85046",
      "title": "Chrome zero-day CVE-2026-85046 (V8 type confusion)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-85046",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-85046.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium V8",
      "tags": [
        "google",
        "chrome",
        "zero-day",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-85046"
      ],
      "affectedVersions": [
        "Before 152.0.7977.82/.83"
      ],
      "fixedVersions": [
        "152.0.7977.82+",
        "152.0.7977.83+"
      ],
      "startedAt": "2026-09-04",
      "closedAt": "2026-09-04",
      "updatedAt": "2026-09-04",
      "summary": "September 4 2026 Chrome update patched CVE-2026-85046, a V8 type confusion zero-day Google said was exploited in the wild. Fixed in Chrome 152.0.7977.82/.83. Later added to CISA KEV.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-11645",
      "title": "Chrome zero-day CVE-2026-11645 (V8 OOB)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-11645",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-11645.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium V8",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-11645"
      ],
      "affectedVersions": [
        "Before 149.0.7827.102 (Win/Linux) / 149.0.7827.103 (Mac)"
      ],
      "fixedVersions": [
        "149.0.7827.102+",
        "149.0.7827.103+"
      ],
      "startedAt": "2026-06-01",
      "closedAt": "2026-06-30",
      "updatedAt": "2026-06-30",
      "summary": "June 2026 Chrome emergency update patched CVE-2026-11645, an out-of-bounds read/write in V8 exploited in the wild (fifth Chrome zero-day of 2026 at the time). Stable builds 149.0.7827.102/.103.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-5281-dawn",
      "title": "Chrome zero-day CVE-2026-5281 (Dawn / WebGPU UAF)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-5281-dawn",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-5281-dawn.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium Dawn",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-5281"
      ],
      "affectedVersions": [
        "Pre-April 2026 Stable"
      ],
      "fixedVersions": [
        "April 2026 Chrome Stable"
      ],
      "startedAt": "2026-04-01",
      "closedAt": "2026-04-30",
      "updatedAt": "2026-04-30",
      "summary": "April 2026 Chrome patch for CVE-2026-5281, a use-after-free in Dawn (WebGPU), actively exploited in the wild.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-days-cve-2026-3909-3910",
      "title": "Chrome zero-days CVE-2026-3909 (Skia) and CVE-2026-3910 (V8)",
      "url": "https://pwn.watch/i/chrome-zero-days-cve-2026-3909-3910",
      "json": "https://pwn.watch/i/chrome-zero-days-cve-2026-3909-3910.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-3909",
        "CVE-2026-3910"
      ],
      "affectedVersions": [
        "Pre-patch March 2026 Stable builds"
      ],
      "fixedVersions": [
        "March 2026 Chrome Stable updates"
      ],
      "startedAt": "2026-03-01",
      "closedAt": "2026-03-31",
      "updatedAt": "2026-03-31",
      "summary": "March 2026 Chrome updates fixed two actively exploited zero-days: CVE-2026-3909 (out-of-bounds write in Skia) and CVE-2026-3910 (inappropriate implementation in V8).",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-2441",
      "title": "Chrome zero-day CVE-2026-2441 (CSS use-after-free)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-2441",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-2441.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-2441"
      ],
      "affectedVersions": [
        "Before Chrome 145.0.7632.75/.76 (Win/Mac) and related Linux builds"
      ],
      "fixedVersions": [
        "145.0.7632.75+",
        "144.0.7559.75+ (Linux per reports)"
      ],
      "startedAt": "2026-02-13",
      "closedAt": "2026-02-16",
      "updatedAt": "2026-02-16",
      "summary": "First actively exploited Chrome zero-day of 2026. Google patched CVE-2026-2441, a high-severity use-after-free in CSS (CSSFontFeatureValuesMap), in mid-February Chrome 145 updates. Google stated an exploit existed in the wild.",
      "xPost": null
    },
    {
      "slug": "google-chromium-cve-2025-14174",
      "title": "Google Chromium: Chromium Out of Bounds Memory Access Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-cve-2025-14174",
      "json": "https://pwn.watch/i/google-chromium-cve-2025-14174.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-14174"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-12-12",
      "closedAt": "2025-12-12",
      "updatedAt": "2025-12-12",
      "summary": "Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-12-12.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-13223",
      "title": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-13223",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-13223.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-13223"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-11-19",
      "closedAt": "2025-11-19",
      "updatedAt": "2025-11-19",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption. Added to CISA KEV on 2025-11-19.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-10585",
      "title": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-10585",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-10585.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-10585"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-09-23",
      "closedAt": "2025-09-23",
      "updatedAt": "2025-09-23",
      "summary": "Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. Added to CISA KEV on 2025-09-23.",
      "xPost": null
    },
    {
      "slug": "google-chromium-cve-2025-6558",
      "title": "Google Chromium: Chromium ANGLE and GPU Improper Input Validation Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-cve-2025-6558",
      "json": "https://pwn.watch/i/google-chromium-cve-2025-6558.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-6558"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-07-22",
      "closedAt": "2025-07-22",
      "updatedAt": "2025-07-22",
      "summary": "Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-07-22.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-6554",
      "title": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-6554",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-6554.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-6554"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-07-02",
      "closedAt": "2025-07-02",
      "updatedAt": "2025-07-02",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-07-02.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-5419",
      "title": "Google Chromium V8: Chromium V8 Out-of-Bounds Read and Write Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-5419",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-5419.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-5419"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-06-05",
      "closedAt": "2025-06-05",
      "updatedAt": "2025-06-05",
      "summary": "Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-06-05.",
      "xPost": null
    },
    {
      "slug": "salesforce-vishing-data-theft-unc6040-2025",
      "title": "Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters)",
      "url": "https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025",
      "json": "https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "no-fix-needed",
      "product": "Salesforce customer instances (social engineering, not a Salesforce vulnerability)",
      "tags": [
        "salesforce",
        "google",
        "shinyhunters",
        "vishing",
        "data-breach",
        "extortion"
      ],
      "cveIds": [],
      "affectedVersions": [
        "n/a"
      ],
      "fixedVersions": [],
      "startedAt": "2025-06-04",
      "closedAt": "2025-08-31",
      "updatedAt": "2025-08-31",
      "summary": "UNC6040 phoned employees posing as IT support and talked them into authorizing a modified Salesforce Data Loader app, then bulk-exported their Salesforce data. Google's own corporate Salesforce instance (prospective Ads customer contacts) was hit in June 2025. Extortion followed under the ShinyHunters name (UNC6240).",
      "xPost": null
    },
    {
      "slug": "google-chromium-mojo-cve-2025-2783",
      "title": "Google Chromium Mojo: Chromium Mojo Sandbox Escape Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-mojo-cve-2025-2783",
      "json": "https://pwn.watch/i/google-chromium-mojo-cve-2025-2783.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium Mojo",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-2783"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-03-27",
      "closedAt": "2025-03-27",
      "updatedAt": "2025-03-27",
      "summary": "Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-03-27.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-7965",
      "title": "Google Chromium V8 Inappropriate Implementation",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-7965"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-08-21",
      "closedAt": "2024-08-28",
      "updatedAt": "2024-08-28",
      "summary": "Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-08-28.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-7971",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-7971"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-08-21",
      "closedAt": "2024-08-26",
      "updatedAt": "2024-08-26",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-08-26.",
      "xPost": null
    },
    {
      "slug": "android-pixel-cve-2024-32896",
      "title": "Android Pixel Privilege Escalation",
      "url": "https://pwn.watch/i/android-pixel-cve-2024-32896",
      "json": "https://pwn.watch/i/android-pixel-cve-2024-32896.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Android Pixel",
      "tags": [
        "android",
        "pixel",
        "google",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-32896"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-06-13",
      "closedAt": "2024-06-13",
      "updatedAt": "2024-06-13",
      "summary": "Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. Added to the CISA KEV catalog on 2024-06-13.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-5274",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-5274"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-28",
      "closedAt": "2024-05-28",
      "updatedAt": "2024-05-28",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-05-28.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-4947",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4947"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-15",
      "closedAt": "2024-05-20",
      "updatedAt": "2024-05-20",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. Added to the CISA KEV catalog on 2024-05-20.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-4761",
      "title": "Google Chromium V8 Out-of-Bounds Memory Write",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4761"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-14",
      "closedAt": "2024-05-16",
      "updatedAt": "2024-05-16",
      "summary": "Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-05-16.",
      "xPost": null
    },
    {
      "slug": "google-chromium-cve-2024-4671",
      "title": "Google Chromium Visuals Use-After-Free",
      "url": "https://pwn.watch/i/google-chromium-cve-2024-4671",
      "json": "https://pwn.watch/i/google-chromium-cve-2024-4671.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4671"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-09",
      "closedAt": "2024-05-13",
      "updatedAt": "2024-05-13",
      "summary": "Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-05-13.",
      "xPost": null
    },
    {
      "slug": "android-pixel-cve-2024-29745-29748",
      "title": "Android Pixel: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/android-pixel-cve-2024-29745-29748",
      "json": "https://pwn.watch/i/android-pixel-cve-2024-29745-29748.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Android Pixel",
      "tags": [
        "android",
        "pixel",
        "google",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-29745",
        "CVE-2024-29748"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-04-04",
      "closedAt": "2024-04-04",
      "updatedAt": "2024-04-05",
      "summary": "CVE-2024-29745: Android Pixel contains an information disclosure vulnerability in the fastboot firmware used to support unlocking, flashing, and locking affected devices. CVE-2024-29748: Android Pixel contains a privilege escalation vulnerability that allows an attacker to interrupt a factory reset triggered by a device admin app. Added to the CISA KEV catalog on 2024-04-04.",
      "xPost": null
    },
    {
      "slug": "android-pixel-cve-2023-21237",
      "title": "Android Pixel Information Disclosure",
      "url": "https://pwn.watch/i/android-pixel-cve-2023-21237",
      "json": "https://pwn.watch/i/android-pixel-cve-2023-21237.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "Android Pixel",
      "tags": [
        "android",
        "pixel",
        "google",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-21237"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-03-05",
      "closedAt": "2024-03-05",
      "updatedAt": "2024-03-05",
      "summary": "Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information. Added to the CISA KEV catalog on 2024-03-05. CVE-2023-21237 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2023-4762",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-4762",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2023-4762.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-4762"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-02-06",
      "closedAt": "2024-02-06",
      "updatedAt": "2024-02-06",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-02-06. CVE-2023-4762 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-0519",
      "title": "Google Chromium V8 Out-of-Bounds Memory Access",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-0519"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-16",
      "closedAt": "2024-01-17",
      "updatedAt": "2024-01-17",
      "summary": "Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-01-17.",
      "xPost": null
    },
    {
      "slug": "google-chromium-webrtc-cve-2023-7024",
      "title": "Google Chromium WebRTC Heap Buffer Overflow",
      "url": "https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024",
      "json": "https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium WebRTC",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-7024"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-02",
      "closedAt": "2024-01-02",
      "updatedAt": "2024-01-02",
      "summary": "Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome. Added to the CISA KEV catalog on 2024-01-02. CVE-2023-7024 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "google-chromium-skia-cve-2023-6345",
      "title": "Google Chromium Skia: Integer Overflow (CVE-2023-6345)",
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-6345",
      "json": "https://pwn.watch/i/google-chromium-skia-cve-2023-6345.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium Skia",
      "tags": [
        "google",
        "android",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-6345"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-11-30",
      "closedAt": "2023-11-30",
      "updatedAt": "2023-11-30",
      "summary": "Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products. Added to CISA KEV on 2023-11-30.",
      "xPost": null
    },
    {
      "slug": "google-chromium-libvpx-cve-2023-5217",
      "title": "Google Chromium libvpx: Heap Buffer Overflow (CVE-2023-5217)",
      "url": "https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217",
      "json": "https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium libvpx",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-5217"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-10-02",
      "closedAt": "2023-10-02",
      "updatedAt": "2023-10-02",
      "summary": "Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome. Added to CISA KEV on 2023-10-02.",
      "xPost": null
    },
    {
      "slug": "libwebp-heap-overflow-cve-2023-4863",
      "title": "libwebp heap overflow exploited in the wild (CVE-2023-4863)",
      "url": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863",
      "json": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "libwebp (Google Chrome and everything that bundles libwebp)",
      "tags": [
        "node",
        "python",
        "libwebp",
        "google",
        "chrome",
        "electron",
        "zero-day",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-4863"
      ],
      "affectedVersions": [
        "Google Chrome before 116.0.5845.187; libwebp before 1.3.2 (NVD)"
      ],
      "fixedVersions": [
        "Chrome 116.0.5845.187",
        "libwebp 1.3.2",
        "Bundling apps/libraries: see each vendor's advisory"
      ],
      "startedAt": "2023-09-11",
      "closedAt": "2023-09-13",
      "updatedAt": "2023-09-13",
      "summary": "A heap overflow in libwebp's lossless decoder, found by Apple SEAR and Citizen Lab after the BLASTPASS iPhone exploit, was exploited in the wild. Because libwebp is everywhere, browsers, Electron apps and image libraries that bundle it all had to ship updates.",
      "xPost": null
    },
    {
      "slug": "http2-rapid-reset-ddos-cve-2023-44487",
      "title": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487)",
      "url": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487",
      "json": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "HTTP/2 protocol implementations (servers, proxies, CDNs)",
      "tags": [
        "node",
        "go",
        "java",
        "dotnet",
        "http2",
        "ddos",
        "cloudflare",
        "google",
        "aws",
        "nginx",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-44487"
      ],
      "affectedVersions": [
        "Most HTTP/2 implementations; see each vendor's advisory"
      ],
      "fixedVersions": [
        "See vendor advisories (each HTTP/2 implementation shipped its own fix)"
      ],
      "startedAt": "2023-08-25",
      "closedAt": "2023-10-10",
      "updatedAt": "2023-10-10",
      "summary": "Attackers abused HTTP/2 stream cancellation (open a request, reset it right away, repeat) to make servers do work at enormous rates. Peaks hit 398M req/s at Google, 201M at Cloudflare and 155M at AWS. Almost every HTTP/2 server and proxy needed a fix, including Node.js, Go, Java servers, .NET/IIS and nginx.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2023-3079",
      "title": "Google Chromium V8: Type Confusion (CVE-2023-3079)",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-3079",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2023-3079.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-3079"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-06-07",
      "closedAt": "2023-06-07",
      "updatedAt": "2023-06-07",
      "summary": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-06-07.",
      "xPost": null
    },
    {
      "slug": "google-chromium-skia-cve-2023-2136",
      "title": "Google Chromium Skia: Chrome Skia Integer Overflow (CVE-2023-2136)",
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-2136",
      "json": "https://pwn.watch/i/google-chromium-skia-cve-2023-2136.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium Skia",
      "tags": [
        "google",
        "android",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-2136"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-04-21",
      "closedAt": "2023-04-21",
      "updatedAt": "2023-04-21",
      "summary": "Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products. Added to CISA KEV on 2023-04-21.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2023-2033",
      "title": "Google Chromium V8: Type Confusion (CVE-2023-2033)",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-2033",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2023-2033.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-2033"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-04-17",
      "closedAt": "2023-04-17",
      "updatedAt": "2023-04-17",
      "summary": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-04-17.",
      "xPost": null
    },
    {
      "slug": "google-chromium-network-service-cve-2022-3038",
      "title": "Google Chromium Network Service: Use-After-Free (CVE-2022-3038)",
      "url": "https://pwn.watch/i/google-chromium-network-service-cve-2022-3038",
      "json": "https://pwn.watch/i/google-chromium-network-service-cve-2022-3038.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium Network Service",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-3038"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-03-30",
      "closedAt": "2023-03-30",
      "updatedAt": "2023-03-30",
      "summary": "Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-03-30.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "google-pixel-cve-2026-58704",
      "incidentTitle": "Google Pixel: Google Pixel Improper Authorization Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-09-16",
      "title": "CISA added CVE-2026-58704 to the KEV catalog (due 2026-09-19).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-pixel-cve-2026-58704"
    },
    {
      "incident": "google-chromium-cve-2025-14174",
      "incidentTitle": "Google Chromium: Chromium Out of Bounds Memory Access Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-12",
      "title": "CISA added CVE-2025-14174 to the KEV catalog (due 2026-01-02).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-cve-2025-14174"
    },
    {
      "incident": "google-chromium-v8-cve-2025-13223",
      "incidentTitle": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-11-19",
      "title": "CISA added CVE-2025-13223 to the KEV catalog (due 2025-12-10).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-13223"
    },
    {
      "incident": "google-chromium-v8-cve-2025-10585",
      "incidentTitle": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-09-23",
      "title": "CISA added CVE-2025-10585 to the KEV catalog (due 2025-10-14).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-10585"
    },
    {
      "incident": "salesforce-vishing-data-theft-unc6040-2025",
      "incidentTitle": "Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-08",
      "title": "Google confirms the breach exposed prospective Google Ads customers' contact info",
      "body": null,
      "sourceUrl": "https://www.bleepingcomputer.com/news/security/google-confirms-data-breach-exposed-potential-google-ads-customers-info/",
      "url": "https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025"
    },
    {
      "incident": "google-chromium-cve-2025-6558",
      "incidentTitle": "Google Chromium: Chromium ANGLE and GPU Improper Input Validation Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-22",
      "title": "CISA added CVE-2025-6558 to the KEV catalog (due 2025-08-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-cve-2025-6558"
    },
    {
      "incident": "google-chromium-v8-cve-2025-6554",
      "incidentTitle": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-02",
      "title": "CISA added CVE-2025-6554 to the KEV catalog (due 2025-07-23).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-6554"
    },
    {
      "incident": "google-chromium-v8-cve-2025-5419",
      "incidentTitle": "Google Chromium V8: Chromium V8 Out-of-Bounds Read and Write Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-05",
      "title": "CISA added CVE-2025-5419 to the KEV catalog (due 2025-06-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-5419"
    },
    {
      "incident": "salesforce-vishing-data-theft-unc6040-2025",
      "incidentTitle": "Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-06-04",
      "title": "Google Threat Intelligence describes UNC6040's vishing and Data Loader abuse",
      "body": null,
      "sourceUrl": "https://cloud.google.com/blog/topics/threat-intelligence/voice-phishing-data-extortion",
      "url": "https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025"
    },
    {
      "incident": "salesforce-vishing-data-theft-unc6040-2025",
      "incidentTitle": "Vishing campaign steals Salesforce data from Google and others (UNC6040 / ShinyHunters)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-06",
      "title": "Google's corporate Salesforce instance breached by UNC6040",
      "body": null,
      "sourceUrl": "https://www.bleepingcomputer.com/news/security/google-suffers-data-breach-in-ongoing-salesforce-data-theft-attacks/",
      "url": "https://pwn.watch/i/salesforce-vishing-data-theft-unc6040-2025"
    },
    {
      "incident": "google-chromium-mojo-cve-2025-2783",
      "incidentTitle": "Google Chromium Mojo: Chromium Mojo Sandbox Escape Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-03-27",
      "title": "CISA added CVE-2025-2783 to the KEV catalog (due 2025-04-17).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-mojo-cve-2025-2783"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7965",
      "incidentTitle": "Google Chromium V8 Inappropriate Implementation",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-28",
      "title": "CISA added CVE-2024-7965 to the KEV catalog (federal deadline 2024-09-18)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7971",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-26",
      "title": "CISA added CVE-2024-7971 to the KEV catalog (federal deadline 2024-09-16)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7965",
      "incidentTitle": "Google Chromium V8 Inappropriate Implementation",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-21",
      "title": "CVE-2024-7965 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-7965",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7971",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-21",
      "title": "CVE-2024-7971 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-7971",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971"
    },
    {
      "incident": "android-pixel-cve-2024-32896",
      "incidentTitle": "Android Pixel Privilege Escalation",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-06-13",
      "title": "CVE-2024-32896 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-32896",
      "url": "https://pwn.watch/i/android-pixel-cve-2024-32896"
    },
    {
      "incident": "android-pixel-cve-2024-32896",
      "incidentTitle": "Android Pixel Privilege Escalation",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-06-13",
      "title": "CISA added CVE-2024-32896 to the KEV catalog (federal deadline 2024-07-04)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/android-pixel-cve-2024-32896"
    },
    {
      "incident": "google-chromium-v8-cve-2024-5274",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-28",
      "title": "CVE-2024-5274 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-5274",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274"
    },
    {
      "incident": "google-chromium-v8-cve-2024-5274",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-28",
      "title": "CISA added CVE-2024-5274 to the KEV catalog (federal deadline 2024-06-18)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4947",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-20",
      "title": "CISA added CVE-2024-4947 to the KEV catalog (federal deadline 2024-06-10)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4761",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Write",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-16",
      "title": "CISA added CVE-2024-4761 to the KEV catalog (federal deadline 2024-06-06)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4947",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-15",
      "title": "CVE-2024-4947 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4947",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4761",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Write",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-14",
      "title": "CVE-2024-4761 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4761",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761"
    },
    {
      "incident": "google-chromium-cve-2024-4671",
      "incidentTitle": "Google Chromium Visuals Use-After-Free",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-13",
      "title": "CISA added CVE-2024-4671 to the KEV catalog (federal deadline 2024-06-03)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-cve-2024-4671"
    },
    {
      "incident": "google-chromium-cve-2024-4671",
      "incidentTitle": "Google Chromium Visuals Use-After-Free",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-09",
      "title": "CVE-2024-4671 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4671",
      "url": "https://pwn.watch/i/google-chromium-cve-2024-4671"
    },
    {
      "incident": "android-pixel-cve-2024-29745-29748",
      "incidentTitle": "Android Pixel: 2 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-04-04",
      "title": "CISA added CVE-2024-29745 to the KEV catalog (federal deadline 2024-04-25)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/android-pixel-cve-2024-29745-29748"
    },
    {
      "incident": "android-pixel-cve-2024-29745-29748",
      "incidentTitle": "Android Pixel: 2 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-04-04",
      "title": "CISA added CVE-2024-29748 to the KEV catalog (federal deadline 2024-04-25)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/android-pixel-cve-2024-29745-29748"
    },
    {
      "incident": "android-pixel-cve-2023-21237",
      "incidentTitle": "Android Pixel Information Disclosure",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-03-05",
      "title": "CISA added CVE-2023-21237 to the KEV catalog (federal deadline 2024-03-26)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/android-pixel-cve-2023-21237"
    },
    {
      "incident": "google-chromium-v8-cve-2023-4762",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-02-06",
      "title": "CISA added CVE-2023-4762 to the KEV catalog (federal deadline 2024-02-27)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-4762"
    },
    {
      "incident": "google-chromium-v8-cve-2024-0519",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Access",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-17",
      "title": "CISA added CVE-2024-0519 to the KEV catalog (federal deadline 2024-02-07)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519"
    },
    {
      "incident": "google-chromium-v8-cve-2024-0519",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Access",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-16",
      "title": "CVE-2024-0519 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-0519",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519"
    },
    {
      "incident": "google-chromium-webrtc-cve-2023-7024",
      "incidentTitle": "Google Chromium WebRTC Heap Buffer Overflow",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-02",
      "title": "CISA added CVE-2023-7024 to the KEV catalog (federal deadline 2024-01-23)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024"
    },
    {
      "incident": "google-chromium-skia-cve-2023-6345",
      "incidentTitle": "Google Chromium Skia: Integer Overflow (CVE-2023-6345)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-11-30",
      "title": "CISA added CVE-2023-6345 to the KEV catalog (due 2023-12-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-6345"
    },
    {
      "incident": "http2-rapid-reset-ddos-cve-2023-44487",
      "incidentTitle": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-10",
      "title": "Coordinated disclosure by Google, Cloudflare and AWS; CISA adds CVE-2023-44487 to KEV",
      "body": null,
      "sourceUrl": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack",
      "url": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487"
    },
    {
      "incident": "google-chromium-libvpx-cve-2023-5217",
      "incidentTitle": "Google Chromium libvpx: Heap Buffer Overflow (CVE-2023-5217)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-02",
      "title": "CISA added CVE-2023-5217 to the KEV catalog (due 2023-10-23).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217"
    },
    {
      "incident": "libwebp-heap-overflow-cve-2023-4863",
      "incidentTitle": "libwebp heap overflow exploited in the wild (CVE-2023-4863)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-09-13",
      "title": "CISA adds CVE-2023-4863 to the KEV catalog",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863"
    },
    {
      "incident": "libwebp-heap-overflow-cve-2023-4863",
      "incidentTitle": "libwebp heap overflow exploited in the wild (CVE-2023-4863)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-09-11",
      "title": "Chrome stable update fixes CVE-2023-4863; Google says an exploit exists in the wild",
      "body": null,
      "sourceUrl": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html",
      "url": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863"
    },
    {
      "incident": "http2-rapid-reset-ddos-cve-2023-44487",
      "incidentTitle": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-08-25",
      "title": "Cloudflare starts seeing unusually large HTTP/2 attacks",
      "body": null,
      "sourceUrl": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
      "url": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487"
    },
    {
      "incident": "google-chromium-v8-cve-2023-3079",
      "incidentTitle": "Google Chromium V8: Type Confusion (CVE-2023-3079)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-06-07",
      "title": "CISA added CVE-2023-3079 to the KEV catalog (due 2023-06-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-3079"
    },
    {
      "incident": "google-chromium-skia-cve-2023-2136",
      "incidentTitle": "Google Chromium Skia: Chrome Skia Integer Overflow (CVE-2023-2136)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-04-21",
      "title": "CISA added CVE-2023-2136 to the KEV catalog (due 2023-05-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-2136"
    },
    {
      "incident": "google-chromium-v8-cve-2023-2033",
      "incidentTitle": "Google Chromium V8: Type Confusion (CVE-2023-2033)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-04-17",
      "title": "CISA added CVE-2023-2033 to the KEV catalog (due 2023-05-08).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-2033"
    },
    {
      "incident": "google-chromium-network-service-cve-2022-3038",
      "incidentTitle": "Google Chromium Network Service: Use-After-Free (CVE-2022-3038)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-30",
      "title": "CISA added CVE-2022-3038 to the KEV catalog (due 2023-04-20).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-network-service-cve-2022-3038"
    }
  ]
}