Icu-project
5 CVEs tracked since 2015. Since Jan 2015, none of them reached CISA KEV.
Icu-project CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2015-01 | 3 | 0 |
| 2015-02 | null or fewer | |
| 2015-03 | null or fewer | |
| 2015-04 | null or fewer | |
| 2015-05 | 2 | 0 |
Products
The products that kept showing up in Icu-project's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 9 most recently published vulnerabilities affecting Icu-project.
- CVE-2020-10531An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() f...8.8
- CVE-2017-15422Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed...6.5
- CVE-2017-14952Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVecto...9.8
- CVE-2014-9654The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring t...9.8
- CVE-2014-8147The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data ty...7.5
- CVE-2014-8146The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track...7.5
- CVE-2014-7940The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory f...7.5
- CVE-2014-7926The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial ...7.5
- CVE-2014-7923The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial ...7.5
The record
- Peak rank
- #47 in May 2015
- Busiest month shown
- Jan 2015, 3 CVEs
- Months with a KEV entry
- 0 since Jan 2015
- Monthly snapshots
- 2 since 2015