Unicode-consortium
2 CVEs tracked since 2008. Since Jan 2008, none of them reached CISA KEV.
Unicode-consortium CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2008-01 | 2 | 0 |
Products
The products that kept showing up in Unicode-consortium's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 8 most recently published vulnerabilities affecting Unicode-consortium.
- CVE-2025-5222Icu: stack buffer overflow in the srbroot::addtag function7.0
- CVE-2024-32752Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool9.1
- CVE-2021-42694An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using...8.3
- CVE-2021-42574An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft so...8.3
- CVE-2020-21913International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.5.5
- CVE-2021-30535Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.8.8
- CVE-2007-4771Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial ...9.3
- CVE-2007-4770libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attacke...6.8
The record
- Peak rank
- #81 in Jan 2008
- Busiest month shown
- Jan 2008, 2 CVEs
- Months with a KEV entry
- 0 since Jan 2008
- Monthly snapshots
- 1 since 2008