| 0 |
|
| 1 |
| url |
VCID-4dke-ryut-ebhg |
| vulnerability_id |
VCID-4dke-ryut-ebhg |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0436 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.6639 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66399 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66385 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66354 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66319 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66347 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66317 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66364 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66378 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0436 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0436
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4dke-ryut-ebhg |
|
| 2 |
| url |
VCID-5wu4-dfd3-wkh2 |
| vulnerability_id |
VCID-5wu4-dfd3-wkh2 |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0762 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.59034 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.59036 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.59018 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.58999 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.58971 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.58993 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.58959 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.59011 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00373 |
| scoring_system |
epss |
| scoring_elements |
0.59017 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0762 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0762
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5wu4-dfd3-wkh2 |
|
| 3 |
| url |
VCID-6fhm-q7k7-n3dw |
| vulnerability_id |
VCID-6fhm-q7k7-n3dw |
| summary |
Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-3071 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.106 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.10793 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.1076 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.10736 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.10731 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.10795 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.10645 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.10722 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00036 |
| scoring_system |
epss |
| scoring_elements |
0.10778 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-3071 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-3071
|
| risk_score |
1.6 |
| exploitability |
0.5 |
| weighted_severity |
3.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6fhm-q7k7-n3dw |
|
| 4 |
| url |
VCID-8h6y-rjqd-nydy |
| vulnerability_id |
VCID-8h6y-rjqd-nydy |
| summary |
Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1915 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00024 |
| scoring_system |
epss |
| scoring_elements |
0.06277 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00024 |
| scoring_system |
epss |
| scoring_elements |
0.06339 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.00062 |
| scoring_system |
epss |
| scoring_elements |
0.19401 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00085 |
| scoring_system |
epss |
| scoring_elements |
0.24621 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00085 |
| scoring_system |
epss |
| scoring_elements |
0.24811 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00085 |
| scoring_system |
epss |
| scoring_elements |
0.24691 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.00085 |
| scoring_system |
epss |
| scoring_elements |
0.24738 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.00085 |
| scoring_system |
epss |
| scoring_elements |
0.24751 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.00085 |
| scoring_system |
epss |
| scoring_elements |
0.24849 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1915 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-1915
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
4.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8h6y-rjqd-nydy |
|
| 5 |
| url |
VCID-azef-hxum-z3eb |
| vulnerability_id |
VCID-azef-hxum-z3eb |
| summary |
Multiple vulnerabilities have been discovered in WebKitGTK+, the worst of which can lead to execution of arbitary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-24201 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0008 |
| scoring_system |
epss |
| scoring_elements |
0.23755 |
| published_at |
2026-04-04T12:55:00Z |
|
| 1 |
| value |
0.0008 |
| scoring_system |
epss |
| scoring_elements |
0.23536 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00087 |
| scoring_system |
epss |
| scoring_elements |
0.24902 |
| published_at |
2026-04-16T12:55:00Z |
|
| 3 |
| value |
0.00087 |
| scoring_system |
epss |
| scoring_elements |
0.24922 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00087 |
| scoring_system |
epss |
| scoring_elements |
0.24969 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00087 |
| scoring_system |
epss |
| scoring_elements |
0.24983 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00087 |
| scoring_system |
epss |
| scoring_elements |
0.24943 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00087 |
| scoring_system |
epss |
| scoring_elements |
0.24888 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00098 |
| scoring_system |
epss |
| scoring_elements |
0.27125 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-24201 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-24201
|
| risk_score |
10.0 |
| exploitability |
2.0 |
| weighted_severity |
7.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-azef-hxum-z3eb |
|
| 6 |
| url |
VCID-bem9-ezts-n3b2 |
| vulnerability_id |
VCID-bem9-ezts-n3b2 |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0447 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70415 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70402 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70387 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70372 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70323 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.7034 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70318 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70363 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70378 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0447 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0447
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bem9-ezts-n3b2 |
|
| 7 |
| url |
VCID-bzcx-rxg3-aygs |
| vulnerability_id |
VCID-bzcx-rxg3-aygs |
| summary |
7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the implementation of Zstandard decompression. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24346. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-11477 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.38072 |
| scoring_system |
epss |
| scoring_elements |
0.97213 |
| published_at |
2026-04-09T12:55:00Z |
|
| 1 |
| value |
0.38072 |
| scoring_system |
epss |
| scoring_elements |
0.97217 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.38072 |
| scoring_system |
epss |
| scoring_elements |
0.97216 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.38072 |
| scoring_system |
epss |
| scoring_elements |
0.97195 |
| published_at |
2026-04-02T12:55:00Z |
|
| 4 |
| value |
0.38072 |
| scoring_system |
epss |
| scoring_elements |
0.97201 |
| published_at |
2026-04-04T12:55:00Z |
|
| 5 |
| value |
0.38072 |
| scoring_system |
epss |
| scoring_elements |
0.97202 |
| published_at |
2026-04-07T12:55:00Z |
|
| 6 |
| value |
0.38072 |
| scoring_system |
epss |
| scoring_elements |
0.97211 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.43636 |
| scoring_system |
epss |
| scoring_elements |
0.97529 |
| published_at |
2026-04-16T12:55:00Z |
|
| 8 |
| value |
0.43636 |
| scoring_system |
epss |
| scoring_elements |
0.97521 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-11477 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-11477
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bzcx-rxg3-aygs |
|
| 8 |
| url |
VCID-c4ah-r5g9-rkbw |
| vulnerability_id |
VCID-c4ah-r5g9-rkbw |
| summary |
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1918 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.296 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29648 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29469 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29532 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29571 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29573 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.35894 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00318 |
| scoring_system |
epss |
| scoring_elements |
0.54886 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00318 |
| scoring_system |
epss |
| scoring_elements |
0.54924 |
| published_at |
2026-04-16T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1918 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-1918
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-c4ah-r5g9-rkbw |
|
| 9 |
| url |
VCID-crkt-7ueh-dbau |
| vulnerability_id |
VCID-crkt-7ueh-dbau |
| summary |
Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (Chromium security severity: Medium) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1921 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00095 |
| scoring_system |
epss |
| scoring_elements |
0.26517 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.00095 |
| scoring_system |
epss |
| scoring_elements |
0.26562 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00095 |
| scoring_system |
epss |
| scoring_elements |
0.26343 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00095 |
| scoring_system |
epss |
| scoring_elements |
0.26412 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00095 |
| scoring_system |
epss |
| scoring_elements |
0.26462 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00095 |
| scoring_system |
epss |
| scoring_elements |
0.26468 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00127 |
| scoring_system |
epss |
| scoring_elements |
0.32002 |
| published_at |
2026-04-13T12:55:00Z |
|
| 7 |
| value |
0.00127 |
| scoring_system |
epss |
| scoring_elements |
0.32036 |
| published_at |
2026-04-16T12:55:00Z |
|
| 8 |
| value |
0.00154 |
| scoring_system |
epss |
| scoring_elements |
0.36099 |
| published_at |
2026-04-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1921 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-1921
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-crkt-7ueh-dbau |
|
| 10 |
| url |
VCID-cw13-y3s5-d7cg |
| vulnerability_id |
VCID-cw13-y3s5-d7cg |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0443 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70415 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70402 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70387 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70372 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70323 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.7034 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70318 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70363 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00634 |
| scoring_system |
epss |
| scoring_elements |
0.70378 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0443 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0443
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cw13-y3s5-d7cg |
|
| 11 |
| url |
VCID-dvuw-89yr-h7hc |
| vulnerability_id |
VCID-dvuw-89yr-h7hc |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-12693 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85284 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85255 |
| published_at |
2026-04-09T12:55:00Z |
|
| 2 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85269 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85267 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85264 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85204 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85222 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85224 |
| published_at |
2026-04-07T12:55:00Z |
|
| 8 |
| value |
0.02469 |
| scoring_system |
epss |
| scoring_elements |
0.85246 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-12693 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-12693
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dvuw-89yr-h7hc |
|
| 12 |
| url |
VCID-gdn6-smyz-j3fm |
| vulnerability_id |
VCID-gdn6-smyz-j3fm |
| summary |
Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-3619 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31107 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31163 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31119 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31075 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31209 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31251 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31072 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31125 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00121 |
| scoring_system |
epss |
| scoring_elements |
0.31155 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-3619 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-3619
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gdn6-smyz-j3fm |
|
| 13 |
| url |
VCID-h5kz-vcq9-1bgh |
| vulnerability_id |
VCID-h5kz-vcq9-1bgh |
| summary |
Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0611 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00625 |
| scoring_system |
epss |
| scoring_elements |
0.70128 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.00625 |
| scoring_system |
epss |
| scoring_elements |
0.70143 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00625 |
| scoring_system |
epss |
| scoring_elements |
0.7012 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00625 |
| scoring_system |
epss |
| scoring_elements |
0.70167 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00625 |
| scoring_system |
epss |
| scoring_elements |
0.70183 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00637 |
| scoring_system |
epss |
| scoring_elements |
0.70469 |
| published_at |
2026-04-13T12:55:00Z |
|
| 6 |
| value |
0.00637 |
| scoring_system |
epss |
| scoring_elements |
0.70511 |
| published_at |
2026-04-16T12:55:00Z |
|
| 7 |
| value |
0.01092 |
| scoring_system |
epss |
| scoring_elements |
0.7797 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.01092 |
| scoring_system |
epss |
| scoring_elements |
0.77954 |
| published_at |
2026-04-12T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0611 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0611
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
4.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h5kz-vcq9-1bgh |
|
| 14 |
| url |
VCID-j9bt-u7v1-mkgt |
| vulnerability_id |
VCID-j9bt-u7v1-mkgt |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-2136 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43125 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43115 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43081 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43066 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.4306 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43088 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43027 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.4308 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00207 |
| scoring_system |
epss |
| scoring_elements |
0.43092 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-2136 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-2136
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j9bt-u7v1-mkgt |
|
| 15 |
| url |
VCID-jaep-1ut3-9qan |
| vulnerability_id |
VCID-jaep-1ut3-9qan |
| summary |
libxslt: Use-After-Free in libxslt numbers.c |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-24855 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15187 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15377 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15337 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15272 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15404 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15473 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15277 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15365 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00049 |
| scoring_system |
epss |
| scoring_elements |
0.15415 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-24855 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-24855
|
| risk_score |
3.5 |
| exploitability |
0.5 |
| weighted_severity |
7.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jaep-1ut3-9qan |
|
| 16 |
| url |
VCID-mhfc-jc5n-gfbu |
| vulnerability_id |
VCID-mhfc-jc5n-gfbu |
| summary |
Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1426 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60167 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.6016 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60146 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60128 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60081 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60106 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60075 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60125 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00391 |
| scoring_system |
epss |
| scoring_elements |
0.60139 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1426 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-1426
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mhfc-jc5n-gfbu |
|
| 17 |
| url |
VCID-rmeb-2jks-muh5 |
| vulnerability_id |
VCID-rmeb-2jks-muh5 |
| summary |
Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chromium security severity: Medium) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1006 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.5602 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56022 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56001 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.55984 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.55957 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.55979 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56008 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56011 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1006 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-1006
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rmeb-2jks-muh5 |
|
| 18 |
| url |
VCID-sbba-7wah-s3dm |
| vulnerability_id |
VCID-sbba-7wah-s3dm |
| summary |
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1919 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.296 |
| published_at |
2026-04-02T12:55:00Z |
|
| 1 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29648 |
| published_at |
2026-04-04T12:55:00Z |
|
| 2 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29469 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29532 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29571 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29573 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00152 |
| scoring_system |
epss |
| scoring_elements |
0.35894 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00318 |
| scoring_system |
epss |
| scoring_elements |
0.54886 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00318 |
| scoring_system |
epss |
| scoring_elements |
0.54924 |
| published_at |
2026-04-16T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-1919 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-1919
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sbba-7wah-s3dm |
|
| 19 |
| url |
VCID-tt6y-5hu2-xfcj |
| vulnerability_id |
VCID-tt6y-5hu2-xfcj |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-12694 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.66798 |
| published_at |
2026-04-13T12:55:00Z |
|
| 1 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.6681 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.66825 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.66845 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.66831 |
| published_at |
2026-04-16T12:55:00Z |
|
| 5 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.66763 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.66789 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.00519 |
| scoring_system |
epss |
| scoring_elements |
0.66761 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-12694 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-12694
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tt6y-5hu2-xfcj |
|
| 20 |
| url |
VCID-u7nr-jpbg-hbbc |
| vulnerability_id |
VCID-u7nr-jpbg-hbbc |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0437 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.20028 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.2015 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.20105 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.20047 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.20212 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.20269 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.19994 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.20074 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00065 |
| scoring_system |
epss |
| scoring_elements |
0.20131 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0437 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0437
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u7nr-jpbg-hbbc |
|
| 21 |
| url |
VCID-vnvz-a9hv-8bee |
| vulnerability_id |
VCID-vnvz-a9hv-8bee |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0438 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58025 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58037 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58015 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.57995 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.57968 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.57986 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.57963 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58018 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.5802 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0438 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0438
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vnvz-a9hv-8bee |
|
| 22 |
| url |
VCID-yj1b-bysp-b7h1 |
| vulnerability_id |
VCID-yj1b-bysp-b7h1 |
| summary |
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0441 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22886 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22966 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22929 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22872 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22985 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.23028 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22821 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22895 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00077 |
| scoring_system |
epss |
| scoring_elements |
0.22947 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0441 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0441
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yj1b-bysp-b7h1 |
|
| 23 |
| url |
VCID-z7hh-qpzy-c7b2 |
| vulnerability_id |
VCID-z7hh-qpzy-c7b2 |
| summary |
libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2024-55549 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0005 |
| scoring_system |
epss |
| scoring_elements |
0.15569 |
| published_at |
2026-04-04T12:55:00Z |
|
| 1 |
| value |
0.0005 |
| scoring_system |
epss |
| scoring_elements |
0.15455 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.0005 |
| scoring_system |
epss |
| scoring_elements |
0.15368 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.0005 |
| scoring_system |
epss |
| scoring_elements |
0.15498 |
| published_at |
2026-04-02T12:55:00Z |
|
| 4 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.15811 |
| published_at |
2026-04-16T12:55:00Z |
|
| 5 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.15992 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.15954 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.15886 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00051 |
| scoring_system |
epss |
| scoring_elements |
0.16014 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2024-55549 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-55549
|
| risk_score |
3.5 |
| exploitability |
0.5 |
| weighted_severity |
7.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z7hh-qpzy-c7b2 |
|
| 24 |
| url |
VCID-zjtf-w6bv-dbfe |
| vulnerability_id |
VCID-zjtf-w6bv-dbfe |
| summary |
mojo: chromium: chromium Mojo on Windows |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-2783 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97308 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97294 |
| published_at |
2026-04-08T12:55:00Z |
|
| 2 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97295 |
| published_at |
2026-04-09T12:55:00Z |
|
| 3 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97298 |
| published_at |
2026-04-11T12:55:00Z |
|
| 4 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97299 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97282 |
| published_at |
2026-04-02T12:55:00Z |
|
| 6 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97287 |
| published_at |
2026-04-04T12:55:00Z |
|
| 7 |
| value |
0.39478 |
| scoring_system |
epss |
| scoring_elements |
0.97288 |
| published_at |
2026-04-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-2783 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-2783
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zjtf-w6bv-dbfe |
|
| 25 |
| url |
VCID-zr38-fv5c-jkfy |
| vulnerability_id |
VCID-zr38-fv5c-jkfy |
| summary |
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0996 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25283 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25372 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.2533 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25277 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25439 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25474 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25247 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25316 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.2536 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0996 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0996
|
| risk_score |
1.6 |
| exploitability |
0.5 |
| weighted_severity |
3.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zr38-fv5c-jkfy |
|
| 26 |
| url |
VCID-zr5w-q9zh-nqbm |
| vulnerability_id |
VCID-zr5w-q9zh-nqbm |
| summary |
Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0999 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.7241 |
| published_at |
2026-04-16T12:55:00Z |
|
| 1 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72398 |
| published_at |
2026-04-11T12:55:00Z |
|
| 2 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72381 |
| published_at |
2026-04-12T12:55:00Z |
|
| 3 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72369 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72329 |
| published_at |
2026-04-02T12:55:00Z |
|
| 5 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72347 |
| published_at |
2026-04-04T12:55:00Z |
|
| 6 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72324 |
| published_at |
2026-04-07T12:55:00Z |
|
| 7 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72362 |
| published_at |
2026-04-08T12:55:00Z |
|
| 8 |
| value |
0.00716 |
| scoring_system |
epss |
| scoring_elements |
0.72375 |
| published_at |
2026-04-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-0999 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-0999
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zr5w-q9zh-nqbm |
|