0day "In the Wild" - Google Drive

	A
1	0day "In the Wild"
2	Last updated: 2023-01-11
3
4	This spreadsheet is used to track cases of zero-day exploits that were detected "in the wild". This means the vulnerability was detected in real attacks against users as a zero-day vulnerability (i.e. not known to the public or the vendor at the time of detection). This data is collected from a range of public sources. We include relevant links to third-party analysis and attribution, but we do this only for your information; their inclusion does not mean we endorse or validate the content there.
5
6	An introduction to this spreadsheet is available on the Project Zero blog:
7	https://googleprojectzero.blogspot.com/p/0day.html
8
9	Some additional notes on how the data is processed:
10	- Scope for inclusion: there are some 0day exploits (such as CVE-2017-12824) in areas that aren't active research targets for Project Zero. Generally this list includes targets that Project Zero has previously investigated (i.e. there are bug reports in our issue tracker) or will investigate in the near future.
11	- Security supported: this list does not include exploits for software that is explicitly EOL at the time of discovery (such as the ExplodingCan exploit for IIS on Windows Server 2003, surfaced in 2017).
12	- Post-disclosure: this list does not include CVEs that were opportunistically exploited by attackers in the gap between public disclosure (or "full disclosure") and a patch becoming available to users (such as CVE-2015-0072, CVE-2018-8414 or CVE-2018-8440).
13	- Reasonable inference: this list includes exploits that were not discovered in an active breach, but were leaked or discovered in a form that suggests with high confidence that they were probably used "in the wild" at some point (e.g. Equation Group and Hacking Team leaks).
14	- Date resolution: we only set the date of discovery when the reporter specifies one. If a discovery is indicated as being made in "late April" or "early March", we record that as if no date was provided.
15	- Time range: data collection starts from the day we announced Project Zero -- July 15, 2014.
16
17	For additions, corrections, questions, or comments, please contact 0day-in-the-wild@google.com

	A	B	C	D	E	F	G	H	I	J	K
1	CVE	Vendor	Product	Type	Description	Date Discovered	Date Patched	Advisory	Analysis URL	Root Cause Analysis	Reported By
2	CVE-2023-21674	Microsoft	Windows	Memory Corruption	ALPC elevation of privilege	???	2023-01-10	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21674	???	???	Jan Vojtěšek, Milánek, and Przemek Gmerek with Avast
3	CVE-2022-4262	Google	Chrome	Memory Corruption	Type confusion in V8	2022-11-29	2022-12-02	https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html	???	???	Clement Lecigne of Google's Threat Analysis Group
4	CVE-2022-42856	Apple	WebKit	Memory Corruption	Type confusion	???	2022-11-30	https://support.apple.com/en-us/HT213516	???	???	Clément Lecigne of Google's Threat Analysis Group
5	CVE-2022-4135	Google	Chrome	Memory Corruption	Heap buffer overflow in GPU	2022-11-22	2022-11-24	https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html	???	???	Clement Lecigne of Google's Threat Analysis Group
6	CVE-2022-41040	Microsoft	Exchange Server	Logic/Design Flaw	Server-side request forgery	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41040	???	???	DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC working with Trend Micro Zero Day Initiative
7	CVE-2022-41082	Microsoft	Exchange Server	Logic/Design Flaw	Remote code execution	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41082	???	???	Piotr Bazydlo (@chudypb) and DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC working with Trend Micro Zero Day Initiative
8	CVE-2022-41128	Microsoft	Internet Explorer	Memory Corruption	JScript9 remote code execution	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-41128.html	Clément Lecigne of Google’s Threat Analysis Group
9	CVE-2022-41073	Microsoft	Windows	Memory Corruption	Print spooler elevation of privilege	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073	???	???	Microsoft Threat Intelligence Center (MSTIC)
10	CVE-2022-41125	Microsoft	Windows	Memory Corruption	CNG Key Isolation Service elevation of privilege	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125	???	???	Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC)
11	CVE-2022-3723	Google	Chrome	Memory Corruption	Type confusion in V8	2022-10-25	2022-10-27	https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html	???	???	Jan Vojtěšek, Milánek, and Przemek Gmerek of Avast
12	CVE-2022-42827	Apple	iOS	Memory Corruption	Out-of-bounds write in the kernel	???	2022-10-24	https://support.apple.com/en-us/HT213489	???	???	???
13	CVE-2022-41033	Microsoft	Windows	Memory Corruption	COM+ event system service elevation of privilege	???	2022-10-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41033	???	???	???
14	CVE-2022-32917	Apple	iOS/macOS	Memory Corruption	Unspecified kernel vulnerability	???	2022-09-12	https://support.apple.com/en-us/HT213445	???	???	???
15	CVE-2022-3075	Google	Chrome	Logic/Design Flaw	Insufficient data validation in Mojo	2022-08-30	2022-09-02	https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html	???	???	???
16	CVE-2022-32894	Apple	iOS/macOS	Memory Corruption	Kernel out-of-bounds write	???	2022-08-17	https://support.apple.com/en-us/HT213413	???	???	???
17	CVE-2022-32893	Apple	WebKit	Memory Corruption	Out-of-bounds write	???	2022-08-17	https://support.apple.com/en-us/HT213413	???	???	???
18	CVE-2022-2856	Google	Chrome	Logic/Design Flaw	Insufficient validation of untrusted input in Intents	2022-07-19	2022-08-16	https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html	???	???	Ashley Shen and Christian Resell of Google Threat Analysis Group
19	CVE-2022-22047	Microsoft	Windows	Memory Corruption	CSRSS Elevation of Privilege	???	2022-07-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047	???	???	Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC)
20	CVE-2022-2294	Google	Chrome	Memory Corruption	Buffer overflow in WebRTC	2022-07-01	2022-07-04	https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-2294.html	Jan Vojtesek from the Avast Threat Intelligence team
21	CVE-2022-30190	Microsoft	Windows	Logic/Design Flaw	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	???	2022-06-14	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190	https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e	???	crazyman with Shadow Chaser Group
22	CVE-2022-26134	Atlassian	Confluence Server & Data Center	Logic/Design Flaw	Unauthenticated Remote Code Execution	2022-05-31	2022-06-03	https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html	https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/	???	Volexity
23	CVE-2022-26925	Microsoft	Windows	Logic/Design Flaw	Windows LSA Spoofing Vulnerability	???	2022-05-10	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26925	???	???	Raphael John with Bertelsmann Printing Group
24	CVE-2022-1364	Google	Chrome	Memory Corruption	Type confusion in V8	2022-04-13	2022-04-14	https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1364.html	Clément Lecigne of Google's Threat Analysis Group
25	CVE-2022-24521	Microsoft	Windows	Memory Corruption	Windows Common Log File System Driver Elevation of Privilege	???	2022-04-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24521	https://www.pixiepointsecurity.com/blog/nday-cve-2022-24521.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-24521.html	National Security Agency, Adam Podlosky and Amir Bazine of Crowdstrike
26	CVE-2022-22674	Apple	macOS	Memory Corruption	Out-of-bounds read in Intel Graphics Driver	???	2022-03-31	https://support.apple.com/en-us/HT213220	???	???	???
27	CVE-2022-22675	Apple	iOS/macOS	Memory Corruption	Out-of-bounds write in AppleAVD	???	2022-03-31	https://support.apple.com/en-us/HT213220	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-22675.html	???
28	CVE-2022-26871	Trend Micro	Apex Central	Logic/Design Flaw	Arbitrary file upload remote code execution	???	2022-03-31	https://success.trendmicro.com/dcx/s/solution/000290678?language=en_US	???	???	Trend Micro Research
29	CVE-2022-1040	Sophos	Firewall	Logic/Design Flaw	Authentication bypass allowing RCE	???	2022-03-25	https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce	https://news.sophos.com/en-us/2022/06/15/sophos-uncovers-how-apt-groups-carried-out-highly-targeted-attack/	???	???
30	CVE-2022-1096	Google	Chrome	Memory Corruption	Type confusion in V8	2022-03-23	2022-03-25	https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1096.html	???
31	CVE-2021-22600	Google	Pixel	Memory Corruption	Double free in packet_set_ring	???	2022-03-07	https://source.android.com/security/bulletin/pixel/2022-03-01	???	???	???
32	CVE-2021-39793	Google	Pixel	Memory Corruption	Out-of-bounds write in mali_base_mem	???	2022-03-07	https://source.android.com/security/bulletin/pixel/2022-03-01	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-39793.html	???
33	CVE-2022-26485	Mozilla	Firefox	Memory Corruption	Use-after-free inXSLT parameter processing	???	2022-03-05	https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/	???	???	Wang Gang, Liu Jialei, Du Sihang, Huang Yi & Yang Kang of 360 ATA
34	CVE-2022-26486	Mozilla	Firefox	Memory Corruption	Use-after-free in WebGPU IPC Framework	???	2022-03-05	https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/	???	???	Wang Gang, Liu Jialei, Du Sihang, Huang Yi & Yang Kang of 360 ATA
35	CVE-2022-0609	Google	Chrome	Memory Corruption	Use-after-free in Animation	2022-02-10	2022-02-15	https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html	https://blog.google/threat-analysis-group/countering-threats-north-korea/	???	Adam Weidemann and Clément Lecigne of Google's Threat Analysis Group
36	CVE-2022-22620	Apple	WebKit	Memory Corruption	Unspecified use-after-free	???	2022-02-10	https://support.apple.com/en-us/HT213093	https://googleprojectzero.blogspot.com/2022/06/an-autopsy-on-zombie-in-wild-0-day.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-22620.html	???
37	CVE-2022-22587	Apple	iOS	Memory Corruption	Memory corruption in IOMobileFrameBuffer	???	2022-01-26	https://support.apple.com/en-us/HT213053	???	???	Meysam Firouzi (@R00tkitSMM) of MBition - Mercedes-Benz Innovation Lab, Siddharth Aeri (@b1n4r1b01), & an anonymous reporter
38	CVE-2022-21882	Microsoft	Windows	Memory Corruption	Win32k Elevation of Privilege	???	2022-01-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-21882.html	Big CJTeam of Tianfu Cup & RyeLv (@b2ahex)
39	CVE-2021-30983	Apple	iOS	Memory Corruption	Buffer overflow in IOMobileFrameBuffer	???	2021-12-13	https://support.apple.com/en-us/HT212976	https://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html	???	Pangu via Tianfu Cup
40	CVE-2021-4102	Google	Chrome	Memory Corruption	Use-after-free in V8	2021-12-09	2021-12-13	https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html	???	???	???
41	CVE-2021-42292	Microsoft	Office	Logic/Design Flaw	Excel security feature bypass	???	2021-11-09	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42292	https://twitter.com/HaifeiLi/status/1486133229614616577	???	Microsoft Threat Intelligence Center (MSTIC)
42	CVE-2021-42321	Microsoft	Exchange Server	Logic/Design Flaw	Remote code execution	???	2021-11-09	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321	https://peterjson.medium.com/some-notes-about-microsoft-exchange-deserialization-rce-cve-2021-42321-110d04e8852	???	Microsoft Security Response Center, Microsoft Threat Intelligence Center (MSTIC), Yuhao Weng with Sangfor, and 漏洞研究院青训队 with Tianfu
43	CVE-2021-1048	Google	Android	Memory Corruption	Use-after-free in ep_loop_check_proc	???	2021-11-06	https://source.android.com/security/bulletin/2021-11-01#2021-11-06-security-patch-level-vulnerability-details	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1048.html	Clément Lecigne and Christian Resell from Google's Threat Analysis Group
44	CVE-2021-0920	Google	Android	Memory Corruption	Race condition during SCM_RIGHTS garbage collection	???	2021-11-05	https://source.android.com/security/bulletin/2021-11-01#kernel-components	https://googleprojectzero.blogspot.com/2022/08/the-quantum-state-of-linux-kernel.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-0920.html	???
45	CVE-2021-38000	Google	Chrome	Logic/Design Flaw	Insufficient validation of untrusted input in Intents	2021-09-15	2021-10-28	https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-38000.html	Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group
46	CVE-2021-38003	Google	Chrome	Memory Corruption	Inappropriate implementation in V8	2021-10-26	2021-10-28	https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	???	Clément Lecigne from Google TAG and Samuel Groß from Google Project Zero
47	CVE-2021-40449	Microsoft	Windows	Memory Corruption	Use-after-free in Win32k	???	2021-10-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40449	https://securelist.com/mysterysnail-attacks-with-windows-zero-day/104509/	???	Boris Larin (oct0xor) with Kaspersky
48	CVE-2021-30883	Apple	iOS	Memory Corruption	A memory corruption issue in IOMobileFrameBuffer	???	2021-10-11	https://support.apple.com/en-us/HT212846	https://saaramar.github.io/IOMFB_integer_overflow_poc/	???	???
49	CVE-2021-41773	Apache	HTTP Server	Logic/Design Flaw	Path traversal & file disclosure vulnerability	2021-09-29	2021-10-04	https://httpd.apache.org/security/vulnerabilities_24.html	???	???	Ash Daulton along with the cPanel Security Team
50	CVE-2021-25487	Samsung	Android	Memory Corruption	Arbitrary code execution via OOB read in modem interface driver	2021-07-26	2021-10-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
51	CVE-2021-25489	Samsung	Android	Memory Corruption	Format string bug in modem interface driver	2021-07-16	2021-10-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
52	CVE-2021-37975	Google	Chrome	Memory Corruption	Use-after-free in V8	2021-09-24	2021-09-30	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html	https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-37975.html	???
53	CVE-2021-37976	Google	Chrome	Memory Corruption	Information leak in Core	2021-09-21	2021-09-30	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	???	Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero
54	CVE-2021-37973	Google	Chrome	Memory Corruption	Use-after-free in Portals	2021-09-21	2021-09-24	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	???	Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero
55	CVE-2021-30869	Apple	macOS	Memory Corruption	Type confusion in XNU	???	2021-09-23	https://support.apple.com/en-us/HT212825	https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/	???	Erye Hernandez of Google Threat Analysis Group, Clément Lecigne of Google Threat Analysis Group, and Ian Beer of Google Project Zero
56	CVE-2021-40444	Microsoft	Internet Explorer	Logic/Design Flaw	Unspecified remote code execution in MSHTML	???	2021-09-14	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444	https://billdemirkapi.me/unpacking-cve-2021-40444-microsoft-office-rce/	???	Rick Cole (MSTIC), Dhanesh Kizhakkinan of Mandiant, Genwei Jiang of Mandiant, Haifei Li of EXPMON, and Byce Abdo of Mandiant
57	CVE-2021-30860	Apple	iOS	Memory Corruption	Integer overflow in CoreGraphics	2021-09-07	2021-09-13	https://support.apple.com/en-us/HT212807	https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html	???	The Citizen Lab
58	CVE-2021-30858	Apple	WebKit	Memory Corruption	Use-after-free in Indexed DB	???	2021-09-13	https://support.apple.com/en-us/HT212807	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-30858.html	???
59	CVE-2021-30632	Google	Chrome	Memory Corruption	Out of bounds write in V8	2021-09-08	2021-09-13	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html	https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_30632/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-30632.html	???
60	CVE-2021-30633	Google	Chrome	Memory Corruption	Use-after-free in Indexed DB	2021-09-08	2021-09-13	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html	???	???	???
61	CVE-2021-31010	Apple	iOS	Logic/Design Flaw	Vulnerability in CommCenter	???	2021-09-13	https://support.apple.com/en-us/HT212807	https://googleprojectzero.blogspot.com/2022/03/forcedentry-sandbox-escape.html	???	The Citizen Lab & Google Project Zero
62	CVE-2021-36948	Microsoft	Windows	???	Windows update medic service elevation of privilege	???	2021-08-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36948	???	???	Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)
63	CVE-2021-30807	Apple	iOS	Memory Corruption	Memory corruption in IOMobileFrameBuffer	???	2021-07-26	https://support.apple.com/en-us/HT212623	https://saaramar.github.io/IOMobileFrameBuffer_LPE_POC/	???	???
64	CVE-2021-30563	Google	Chrome	Memory Corruption	Type confusion in v8	2021-07-12	2021-07-15	https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html	???	???	???
65	CVE-2021-33771	Microsoft	Windows	Memory Corruption	Unspecified kernel escalation of privilege	???	2021-07-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33771	https://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/	???	Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)
66	CVE-2021-34448	Microsoft	Internet Explorer	Memory Corruption	Unspecified scripting engine memory corruption	???	2021-07-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34448	???	???	yangkang(@dnpushme)&bianliang&wanggang&lihongfei of 360 ATA
67	CVE-2021-31979	Microsoft	Windows	Memory Corruption	Unspecified kernel escalation of privilege	???	2021-07-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31979	https://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/	???	Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)
68	CVE-2021-30554	Google	Chrome	Memory Corruption	Use-after-free in WebGL	2021-06-15	2021-06-17	https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html	???	???	???
69	CVE-2021-30551	Google	Chrome	Memory Corruption	Type confusion in v8	2021-06-03	2021-06-09	https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30551.html	Clement Lecigne of Google's Threat Analysis Group and Sergei Glazunov of Google Project Zero
70	CVE-2021-31955	Microsoft	Windows	Logic/Design Flaw	Kernel information disclosure in SuperFetch	2021-04-14	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31955	https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/	???	Boris Larin (Oct0xor) of Kaspersky Lab
71	CVE-2021-31956	Microsoft	Windows	Memory Corruption	Heap-based buffer overflow in ntfs.sys	2021-04-14	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31956	https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/	???	Boris Larin (Oct0xor) of Kaspersky Lab
72	CVE-2021-33742	Microsoft	Internet Explorer	Memory Corruption	Out-of-bounds write in MSHTML	2021-06-03	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33742	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-33742.html	Clément Lecigne of Google’s Threat Analysis Group
73	CVE-2021-31199	Microsoft	Windows	???	Unspecified enhanced crypto provider escalation of privilege	???	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31199	???	???	???
74	CVE-2021-31201	Microsoft	Windows	???	Unspecified enhanced crypto provider escalation of privilege	???	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31201	???	???	???
75	CVE-2021-28550	Adobe	Reader	Memory Corruption	Use-after-free	???	2021-05-11	https://helpx.adobe.com/security/products/acrobat/apsb21-29.html	???	???	???
76	CVE-2021-30665	Apple	WebKit	Memory Corruption	Memory corruption related to state management in Webkit	???	2021-05-03	https://support.apple.com/en-us/HT212336	???	???	yangkang (@dnpushme)&zerokeeper&bianliang of 360 ATA
77	CVE-2021-30663	Apple	WebKit	Memory Corruption	Integer overflow in Webkit	???	2021-05-03	https://support.apple.com/en-us/HT212336	???	???	???
78	CVE-2021-1905	Qualcomm	Android	Memory Corruption	Use-after-free in GPU	2020-11-17	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1905.html	???
79	CVE-2021-1906	Qualcomm	Android	Logic/Design Flaw	Improper error handling in GPU	2020-11-17	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	???	???	???
80	CVE-2021-28663	ARM	Android	Memory Corruption	Use-after-free in Mali GPU	???	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	https://github.com/lntrx/CVE-2021-28663	???	???
81	CVE-2021-28664	ARM	Android	Memory Corruption	Writes to read-only memory in Mali GPU	???	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	???	???	???
82	CVE-2021-25394	Samsung	Android	Memory Corruption	Use-after-free in MFC charger driver	2020-12-31	2021-05-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
83	CVE-2021-25395	Samsung	Android	Memory Corruption	Use-after-free in MFC charger driver	2020-12-31	2021-05-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
84	CVE-2021-30661	Apple	WebKit	Memory Corruption	Use-after-free in WebKit	???	2021-04-26	https://support.apple.com/en-us/HT212317	???	???	yangkang(@dnpushme) of 360 ATA
85	CVE-2021-28310	Microsoft	Windows	Memory Corruption	Out-of-bounds write vulnerability in dwmcore.dll	???	2021-04-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28310	https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/	???	Boris Larin (Oct0xor) of Kaspersky Lab
86	CVE-2021-21206	Google	Chrome	Memory Corruption	Use-after-free in Blink	2021-04-07	2021-04-13	https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html	???	???	???
87	CVE-2021-1879	Apple	WebKit	UXSS	Universal cross site scripting in Webkit	???	2021-03-26	https://support.apple.com/en-us/HT212256	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1879.html	Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group
88	CVE-2021-21193	Google	Chrome	Memory Corruption	Use-after-free in Blink	2021-03-09	2021-03-12	https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html	???	???	???
89	CVE-2021-26411	Microsoft	Internet Explorer	Memory Corruption	Use-after-free in MSHTML	???	2021-03-09	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26411	https://enki.co.kr/blog/2021/02/04/ie_0day.html	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-26411.html	yangkang(@dnpushme) & huangyi(@C0rk1_H) & Enki
90	CVE-2021-26855	Microsoft	Exchange Server	Logic/Design Flaw	Server-side request forgery (SSRF)	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-26855.html	Volexity, Orange Tsai from DEVCORE research team, and Microsoft Threat Intelligence Center (MSTIC)
91	CVE-2021-26857	Microsoft	Exchange Server	Logic/Design Flaw	Insecure deserialization in the Unifed Messaging service	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	???	Dubex and Microsoft Threat Intelligence Center (MSTIC)
92	CVE-2021-26858	Microsoft	Exchange Server	Logic/Design Flaw	Arbitrary file write	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	???	Microsoft Threat Intelligence Center
93	CVE-2021-27065	Microsoft	Exchange Server	Logic/Design Flaw	Arbitrary file write	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	???	Volexity, Orange Tsai from DEVCORE research team, and Microsoft Threat Intelligence Center (MSTIC)
94	CVE-2021-21166	Google	Chrome	Memory Corruption	Object lifecycle issue in audio	2021-02-11	2021-03-02	https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-21166.html	Alison Huffman, Microsoft Browser Vulnerability Research & Clement Lecigne of Google Threat Analysis Group
95	CVE-2021-25337	Samsung	Android	Logic/Design Flaw	Access control issues in clipboard provider	2020-11-03	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-25337.html	???
96	CVE-2021-25369	Samsung	Android	Logic/Design Flaw	Kernel info leak in sec_log	2020-12-10	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-25369.html	???
97	CVE-2021-25370	Samsung	Android	Memory Corruption	Use-after-free in dpu (DECON) driver	2020-12-10	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html	???	???
98	CVE-2021-25371	Samsung	Android	Logic/Design Flaw	Possible to load arbitrary ELF library inside DSP	2020-12-22	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
99	CVE-2021-25372	Samsung	Android	Memory Corruption	Out-of-bounds access vulnerability in DSP driver	2020-12-22	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
100	CVE-2021-21017	Adobe	Reader	Memory Corruption	Heap-based buffer overflow	???	2021-02-09	https://helpx.adobe.com/security/products/acrobat/apsb21-09.html	https://github.com/ZeusBox/CVE-2021-21017	???	???
101	CVE-2021-1732	Microsoft	Windows	Memory Corruption	Unspecified win32k escalation of privilege	2020-12-10	2021-02-09	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1732	https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1732.html	JinQuan, MaDongZe, TuXiaoYi, and LiHao of DBAPPSecurity Co., Ltd
102	CVE-2021-21148	Google	Chrome	Memory Corruption	Heap buffer overflow in V8	2021-01-24	2021-02-04	https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html	???	???	Mattias Buelens
103	CVE-2021-1782	Apple	iOS	Memory Corruption	Unspecified kernel race condition	???	2021-01-26	https://support.apple.com/en-us/HT212146	https://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html	???	???
104	CVE-2021-1870	Apple	WebKit	Logic/Design Flaw	Unspecified logic flaw in Webkit	???	2021-01-26	https://support.apple.com/en-us/HT212146	???	???	???
105	CVE-2021-1871	Apple	WebKit	Logic/Design Flaw	Unspecified logic flaw in Webkit	???	2021-01-26	https://support.apple.com/en-us/HT212146	???	???	???
106	CVE-2021-1647	Microsoft	Windows Defender	Memory Corruption	Unspecified remote code execution in Windows Defender	???	2021-01-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1647	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1647.html	???
107	CVE-2020-11261	Qualcomm	Android	Logic/Design Flaw	Memory management logic error in kgsl driver	2020-07-20	2021-01-04	https://source.android.com/security/bulletin/2021-01-01	???	???	Man Yue Mo of GitHub Security Lab
108	CVE-2020-4006	VMWare	VMware Workspace ONE Access	Logic/Design Flaw	Command injection	???	2020-12-03	https://www.vmware.com/security/advisories/VMSA-2020-0027.html	???	???	National Security Agency
109	CVE-2020-16013	Google	Chrome	Memory Corruption	Unspecified memory corruption in v8	2020-11-09	2020-11-11	https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html	???	???	???
110	CVE-2020-16017	Google	Chrome	Memory Corruption	Use-after-free in site isolation	2020-11-07	2020-11-11	https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html	???	???	???
111	CVE-2020-17087	Microsoft	Windows	Memory Corruption	Heap buffer overflow in cng.sys IOCTL 0x390400	2020-10-22	2020-11-10	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-17087	https://bugs.chromium.org/p/project-zero/issues/detail?id=2104	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-17087.html	Google Project Zero
112	CVE-2020-27930	Apple	iOS	Memory Corruption	Unspecified memory corruption in font parsing	2020-10-26	2020-11-05	https://support.apple.com/en-us/HT211929	https://bugs.chromium.org/p/project-zero/issues/detail?id=2105	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-27930.html	Google Project Zero
113	CVE-2020-27950	Apple	iOS	Information Leak	Unspecified memory initialization issue in kernel	2020-10-29	2020-11-05	https://support.apple.com/en-us/HT211929	https://bugs.chromium.org/p/project-zero/issues/detail?id=2108&q=CVE-2020-27950&can=1	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-27950.html	Google Project Zero
114	CVE-2020-27932	Apple	iOS	Memory Corruption	Unspecified type confusion in kernel	2020-10-26	2020-11-05	https://support.apple.com/en-us/HT211929	https://bugs.chromium.org/p/project-zero/issues/detail?id=2107	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-27932.html	Google Project Zero
115	CVE-2020-16009	Google	Chrome	Memory Corruption	Type confusion in TurboFan map deprecation	2020-10-29	2020-11-02	https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html	https://bugs.chromium.org/p/project-zero/issues/detail?id=2106	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-16009.html	Google Project Zero/Google TAG
116	CVE-2020-16010	Google	Chrome	Memory Corruption	Unspecified memory corruption in Chrome on Android sandbox	2020-10-31	2020-11-02	https://chromereleases.googleblog.com/2020/11/chrome-for-android-update.html	https://bugs.chromium.org/p/project-zero/issues/detail?id=2112	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-16010.html	Google Project Zero
117	CVE-2020-15999	Google	Chrome	Memory Corruption	Heap buffer overflow in typescript Load_SBit_Png	2020-10-19	2020-10-20	https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html	https://savannah.nongnu.org/bugs/?59308	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-15999.html	Google Project Zero
118	CVE-2020-1380	Microsoft	Internet Explorer	Memory Corruption	Use-after-free in JScript9	???	2020-08-11	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1380	https://securelist.com/ie-and-windows-zero-day-operation-powerfall/97976/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-1380.html	Boris Larin (Oct0xor) of Kaspersky Lab
119	CVE-2020-0986	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in Windows Kernel	???	2020-06-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986	https://securelist.com/ie-and-windows-zero-day-operation-powerfall/97976/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-0986.html	Andy, Anonymous working with Trend Micro's Zero Day Initiative, & Boris Larin of Kaspersky
120	CVE-2020-12271	Sophos	XG Firewall	Logic/Design Flaw	SQL injection in admin interface/user portal	2020-04-22	2020-04-25	https://community.sophos.com/kb/en-us/135412	https://news.sophos.com/en-us/2020/04/26/asnarok/	???	???
121	CVE-2020-0938	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in Adobe Type 1 PostScript format	???	2020-04-14	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0938	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-0938.html	Liubenjin and Zhiyi Zhang from Codesafe Team of Legendsec at Qi'anxin Group
122	CVE-2020-1020	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in Adobe Type 1 PostScript format	???	2020-04-14	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1020	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-1020.html	Google Project Zero & Google's Threat Analysis Group
123	CVE-2020-1027	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in Windows Kernel	2020-03-23	2020-04-14	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-1027	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-1027.html	Google Project Zero & Google's Threat Analysis Group
124	CVE-2020-6572	Google	Chrome	Memory Corruption	Use-after-free in media	2020-04-01	2020-04-07	https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2020/CVE-2020-6572.html	???
125	CVE-2020-6819	Mozilla	Firefox	Memory Corruption	Use-after-free while running the nsDocShell destructor	2020-03-08	2020-04-03	https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/	???	???	Francisco Alonso @revskills working with Javier Marcos of @JMPSec
126	CVE-2020-6820	Mozilla	Firefox	Memory Corruption	Use-after-free when handling a ReadableStream	2020-04-01	2020-04-03	https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-6820.html	Francisco Alonso @revskills working with Javier Marcos of @JMPSec
127	CVE-2020-6453	Google	Chrome	Memory Corruption	Type confusion in v8	2020-03-26	2020-03-31	https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_31.html	???	???	???
128	CVE-2020-8467	TrendMicro	Apex One/OfficeScan	Unspecified	Unspecified vulnerability in a migration tool component	???	2020-03-16	https://success.trendmicro.com/solution/000245571	???	???	Trend Micro Research
129	CVE-2020-8468	TrendMicro	Apex One/OfficeScan	Logic/Design Flaw	Content validation escape in agent client component	???	2020-03-16	https://success.trendmicro.com/solution/000245571	???	???	Trend Micro Research
130	CVE-2020-6418	Google	Chrome	Memory Corruption	Type confusion in v8	2020-02-18	2020-02-24	https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_24.html	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2020/CVE-2020-6418.html	Clement Lecigne of Google's Threat Analysis Group
131	CVE-2020-0674	Microsoft	Internet Explorer	Memory Corruption	Unspecified memory corruption in Internet Explorer	???	2020-02-11	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0674	https://blogs.360.cn/post/apt-c-06_0day.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2020-0674.html	Yi Huang(@C0rk1_H) & Kang Yang(@dnpushme) of Qihoo 360 ATA, Clément Lecigne of Google’s Threat Analysis Group
132	CVE-2019-17026	Mozilla	Firefox	Memory Corruption	Type confusion in IonMonkey JIT compiler	2020-01-07	2020-01-08	https://www.mozilla.org/en-US/security/advisories/mfsa2020-03/	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2020/CVE-2019-17026.html	Qihoo 360 ATA
133	CVE-2019-1458	Microsoft	Windows	Memory Corruption	Memory corruption in window switching	???	2019-12-10	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1458	https://securelist.com/windows-0-day-exploit-cve-2019-1458-used-in-operation-wizardopium/95432/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-1458.html	Anton Ivanov and Alexey Kulaev of Kaspersky Lab
134	CVE-2019-1429	Microsoft	Internet Explorer	Memory Corruption	Unspecified memory corruption in Internet Explorer	???	2019-11-12	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1429	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-1367.html	Clément Lecigne of Google’s Threat Analysis Group & Ivan Fratric of Google Project Zero
135	CVE-2019-13720	Google	Chrome	Memory Corruption	Use-after-free in audio	2019-10-29	2019-10-31	https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_31.html	https://securelist.com/chrome-0-day-exploit-cve-2019-13720-used-in-operation-wizardopium/94866/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-13720.html	Anton Ivanov and Alexey Kulaev of Kaspersky Lab
136	CVE-2019-18187	Trend Micro	OfficeScan	Logic/Design Flaw	Directory traversal in ZIP file extraction	???	2019-10-28	https://success.trendmicro.com/solution/000151730	???	???	Trend Micro Research
137	CVE-2019-2215	Google	Android	Memory Corruption	Use-after-free in Binder	2019-09-26	2019-10-06	https://source.android.com/security/bulletin/2019-10-01.html#kernel-b	https://bugs.chromium.org/p/project-zero/issues/detail?id=1942	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-2215.html	Maddie Stone of Google Project Zero
138	CVE-2019-1367	Microsoft	Internet Explorer	Memory Corruption	Unspecified memory corruption in Internet Explorer	???	2019-09-23	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1367	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-1367.html	Clément Lecigne of Google’s Threat Analysis Group
139	CVE-2019-0880	Microsoft	Windows	Logic/Design Flaw	Sandbox escape in splwow64.exe	???	2019-07-09	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0880	???	???	Gene Yoo of Resecurity, Inc.
140	CVE-2019-1132	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in win32k	???	2019-07-09	https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1132	https://www.welivesecurity.com/2019/07/10/windows-zero-day-cve-2019-1132-exploit/	???	Anton Cherepanov, Senior Malware Researcher of ESET
141	CVE-2019-11708	Mozilla	Firefox	Logic/Design Flaw	Sandbox escape in Prompt:Open	???	2019-06-20	https://www.mozilla.org/en-US/security/advisories/mfsa2019-19/	???	???	Coinbase Security
142	CVE-2019-11707	Mozilla	Firefox	Memory Corruption	Type confusion in Array.pop	???	2019-06-18	https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-11707.html	Samuel Groß of Google Project Zero, Coinbase Security
143	CVE-2019-3568	Facebook	WhatsApp	Memory Corruption	Buffer overflow in SRTCP packets	???	2019-05-13	https://www.facebook.com/security/advisories/cve-2019-3568	https://research.checkpoint.com/the-nso-whatsapp-vulnerability-this-is-how-it-happened/	???	???
144	CVE-2019-0803	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in win32k	???	2019-04-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0803	???	???	Donghai Zhu of Alibaba Cloud Intelligence Security Team
145	CVE-2019-0859	Microsoft	Windows	Memory Corruption	Use-after-free in CreateWindowEx	2019-03-17	2019-04-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0859	https://securelist.com/new-win32k-zero-day-cve-2019-0859/90435/	???	Vasily Berdnikov & Boris Larin of Kaspersky Lab
146	CVE-2019-0808	Microsoft	Windows	Memory Corruption	NULL pointer dereference in win32k!xxxMNFindWindowFromPoint	???	2019-03-12	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0808	https://blog.360totalsecurity.com/en/analysis-of-the-causes-of-cve-2019-0808-core-elevation-permission-vulnerability/	???	Clément Lecigne of Google’s Threat Analysis Group
147	CVE-2019-0797	Microsoft	Windows	Memory Corruption	Race condition in NtDCompositionDestroyConnection	2019-02-22	2019-03-12	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0797	https://securelist.com/cve-2019-0797-zero-day-vulnerability/89885/	???	Vasily Berdnikov & Boris Larin of Kaspersky Lab
148	CVE-2019-0703	Microsoft	Windows	Information Leak	Unspecified information leak vulnerability in SMB	???	2019-03-12	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0703	???	???	Piotr Krysiuk of Symantec & Andrew Burkhardt of MSRC Vulnerabilities & Mitigations Team
149	CVE-2019-5786	Google	Chrome	Memory Corruption	Use-after-free in FileReader	2019-02-27	2019-03-01	https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html	https://blog.exodusintel.com/2019/03/20/cve-2019-5786-analysis-and-exploitation/	???	Clement Lecigne of Google's Threat Analysis Group
150	CVE-2019-0676	Microsoft	Internet Explorer	Information Leak	Unspecified information leak vulnerability	???	2019-02-12	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676	???	???	Clement Lecigne of Google’s Threat Analysis Group
151	CVE-2019-7286	Apple	iOS	Memory Corruption	Use-after-free in CFPrefsDaemon	???	2019-02-07	https://support.apple.com/en-us/HT209520	https://blog.zecops.com/vulnerabilities/analysis-and-reproduction-of-cve-2019-7286/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-7286.html	Clement Lecigne of Google Threat Analysis Group, Ian Beer & Samuel Groß of Google Project Zero, & an anonymous researcher
152	CVE-2019-7287	Apple	iOS	Memory Corruption	Buffer overflow in ProvInfoIOKitUserClient	???	2019-02-07	https://support.apple.com/en-us/HT209520	https://www.antid0te.com/blog/19-02-23-ios-kernel-cve-2019-7287-memory-corruption-vulnerability.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2019/CVE-2019-7287.html	Clement Lecigne of Google Threat Analysis Group, Ian Beer & Samuel Groß of Google Project Zero, & an anonymous researcher
153	CVE-2018-8653	Microsoft	Internet Explorer	Memory Corruption	Use-after-free in Enumerator	???	2018-12-19	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8653	https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/ie-scripting-flaw-still-a-threat-to-unpatched-systems-analyzing-cve-2018-8653/	???	Clement Lecigne of Google’s Threat Analysis Group
154	CVE-2018-8611	Microsoft	Windows	Memory Corruption	Race condition in kernel transaction manager	2018-10-29	2018-12-11	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8611	https://securelist.com/zero-day-in-windows-kernel-transaction-manager-cve-2018-8611/89253/	???	Boris Larin (Oct0xor) & Igor Soumenkov (2igosha) of Kaspersky Lab
155	CVE-2018-15982	Adobe	Flash	Memory Corruption	Use-after-free in TVSDK Metadata	2018-11-29	2018-12-05	https://helpx.adobe.com/security/products/flash-player/apsb18-42.html?red=a	http://blogs.360.cn/post/PoisonNeedles_CVE-2018-15982_EN	???	Chenming Xu and Ed Miles of Gigamon ATR, Yang Kang (@dnpushme) and Jinquan (@jq0904) of Qihoo 360 Core Security (@360CoreSec), He Zhiqiu, Qu Yifan, Bai Haowen, Zeng Haitao and Gu Liang of 360 Threat Intelligence of 360 Enterprise Security Group, b2ahex
156	CVE-2018-8589	Microsoft	Windows	Memory Corruption	Race condition in win32k!xxxMoveWindow	2018-10-17	2018-11-13	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589	https://securelist.com/a-new-exploit-for-zero-day-vulnerability-cve-2018-8589/88845/	???	Boris Larin (Oct0xor) & Igor Soumenkov (2igosha) of Kaspersky Lab
157	CVE-2018-8453	Microsoft	Windows	Memory Corruption	Use-after-free in win32kfull!xxxDestroyWindow	2018-08-17	2018-10-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453	https://securelist.com/cve-2018-8453-used-in-targeted-attacks/88151/	???	Kaspersky Lab
158	CVE-2018-8373	Microsoft	VBScript	Memory Corruption	Use-after-free in VBScript AssignVar	2018-07-11	2018-08-14	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8373	https://blog.trendmicro.com/trendlabs-security-intelligence/use-after-free-uaf-vulnerability-cve-2018-8373-in-vbscript-engine-affects-internet-explorer-to-run-shellcode/	???	Elliot Cao of Trend Micro Security Research working with Trend Micro’s Zero Day Initiative (ZDI)
159	CVE-2018-5002	Adobe	Flash	Memory Corruption	Out-of-bounds read/write in AVM li8 opcode	???	2018-06-07	https://helpx.adobe.com/security/products/flash-player/apsb18-19.html	https://s.tencent.com/research/report/489.html	???	Chenming Xu and Jason Jones of ICEBRG, Bai Haowen, Zeng Haitao and Huang Chaowen of 360 Threat Intelligence Center of 360 Enterprise Security Group, and Yang Kang, Hu Jiang, Zhang Qing, and Jin Quan of Qihoo 360 Core Security (@360CoreSec), Tencent PC Manager (http://guanjia.qq.com/)
160	CVE-2018-4990	Adobe	Reader	Memory Corruption	Out-of-bounds free in JPEG2000 CMAP	???	2018-05-14	https://helpx.adobe.com/security/products/acrobat/apsb18-09.html	https://srcincite.io/blog/2018/05/21/adobe-me-and-a-double-free.html	???	Anton Cherepanov of ESET & Matt Oh of Microsoft, Ke Liu of Tencent's Xuanwu LAB working via Trend Micro's Zero Day Initiative
161	CVE-2018-8120	Microsoft	Windows	Memory Corruption	NULL pointer dereference in NtUserSetImeInfoEx	???	2018-05-08	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8120	https://www.welivesecurity.com/2018/05/15/tale-two-zero-days/	???	Anton Cherepanov, Senior Malware Researcher of ESET
162	CVE-2018-8174	Microsoft	VBScript	Memory Corruption	Use-after-free in VBScriptClass::Release	???	2018-05-08	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8174	https://securelist.com/root-cause-analysis-of-cve-2018-8174/85486/	???	Dan Lutas of Bitdefender, Ding Maoyin of Qihoo 360 Core Security, Anton Ivanov of Kaspersky Lab, Song Shenlei of Qihoo 360 Core Security, Anonymous working with Trend Micro's Zero Day Initiative, Simon Zuckerbraun working with Trend Micro's Zero Day Initiative, Yang Kang of Qihoo 360 Core Security, Jinquan of Qihoo 360 Core Security, Vladislav Stolyarov of Kaspersky Lab
163	CVE-2018-4878	Adobe	Flash	Memory Corruption	Use-after-free in MediaPlayer DRM Listener	???	2018-02-06	https://helpx.adobe.com/security/products/flash-player/apsb18-03.html	http://blog.morphisec.com/cve-2018-4878-an-analysis-of-the-flash-player-hack	???	KrCERT/CC
164	CVE-2018-0802	Microsoft	Office	Memory Corruption	Buffer overflow in equation editor lfFaceName	???	2018-01-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802	https://www.freebuf.com/vuls/159789.html	???	Liang Yin of Tencent PC Manager, Zhiyuan Zheng, Yuki Chen of Qihoo 360 Vulcan Team, Yang Kang, Ding Maoyin and Song Shenlei, and Jinquan of Qihoo 360 Core Security (@360CoreSec), Luka Treiber of 0patch Team - ACROS Security, zhouat of Qihoo 360 Vulcan Team, bee13oy of Qihoo 360 Vulcan Team, Netanel Ben Simon and Omer Gull of Check Point Software Technologies
165	CVE-2017-11292	Adobe	Flash	Memory Corruption	Type confusion in TVSDK BufferControlParameters	2017-10-10	2017-10-16	https://helpx.adobe.com/security/products/flash-player/apsb17-32.html	https://securelist.com/blackoasis-apt-and-new-targeted-attacks-leveraging-zero-day-exploit/82732/	???	Anton Ivanov of Kaspersky Labs
166	CVE-2017-11826	Microsoft	Office	Memory Corruption	Memory corruption in Open XML format nested tags	2017-09-28	2017-10-10	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826	https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/	???	Yang Kang, Ding Maoyin and Song Shenlei of Qihoo 360 Core Security (@360CoreSec)
167	CVE-2017-8759	Microsoft	Office	Logic/Design Flaw	Code injection in SOAP WSDL parser	???	2017-09-12	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759	https://www.fireeye.com/blog/threat-research/2017/09/zero-day-used-to-distribute-finspy.html	???	Genwei Jiang and Dhanesh Kizhakkinan of FireEye, Inc.
168	CVE-2017-8464	Microsoft	Windows	Logic/Design Flaw	Code injection in LNK file ExtraData parsing	???	2017-06-13	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464	http://www.vxjump.net/files/vuln_analysis/cve-2017-8464.txt	???	???
169	CVE-2017-8543	Microsoft	Windows	Memory Corruption	Buffer overflow in Windows Search CTableVariant	???	2017-06-13	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8543	https://mp.weixin.qq.com/s/X2JcKCpCH4exDoxMK5oN5Q?	???	???
170	CVE-2017-0261	Microsoft	Office	Memory Corruption	Use-after free in EPS restore operator	???	2017-05-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261	https://www.fireeye.com/blog/threat-research/2017/05/eps-processing-zero-days.html	???	Genwei Jiang of FireEye, Inc., Steven Hunter of MSRC Vulnerabilities & Mitigations
171	CVE-2017-0262	Microsoft	Office	Memory Corruption	Type Confusion in EPS forall operator	???	2017-05-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0262	https://www.fireeye.com/blog/threat-research/2017/05/eps-processing-zero-days.html	???	Thomas Dupuy and Jessy Campos of ESET, Genwei Jiang of FireEye, Inc.
172	CVE-2017-0263	Microsoft	Windows	Memory Corruption	Use-after-free in win32k!xxxDestroyWindow	???	2017-05-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0263	https://www.fireeye.com/blog/threat-research/2017/05/eps-processing-zero-days.html	???	Mikhail Tsvetkov of Positive Technologies, Dhanesh Kizhakkinan of FireEye Inc, Thomas Dupuy and Jessy Campos of ESET
173	CVE-2017-0222	Microsoft	Internet Explorer	Memory Corruption	Unspecified memory corruption in Internet Explorer	???	2017-05-09	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0222	???	???	???
174	CVE-2017-8291	Ghostscript	Ghostscript	Memory Corruption	Type confusion in rsdparams internal operator	???	2017-04-27	https://bugs.ghostscript.com/show_bug.cgi?id=697799	https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=04b37bbce1	???	???
175	CVE-2017-0210	Microsoft	Internet Explorer	UXSS	UXSS in htmlFile ActiveX control	???	2017-04-11	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0210	https://blog.talosintelligence.com/2017/04/ms-tuesday.html	???	???
176	CVE-2017-0199	Microsoft	Office	Logic/Design Flaw	Logic/design flaw in embedded HTA documents	???	2017-04-11	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199	https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199-hta-handler.html	???	Ryan Hanson (@Ryhanson) of Optiv, Microsoft MSRC Vulnerabilities and Mitigations Team, Microsoft Office Security Team, Genwei Jiang, FLARE Team, FireEye Inc, Eduardo Braun Prado of SecuriTeam Secure Disclosure (SSD)
177	CVE-2017-1274	IBM	Domino	Memory Corruption	Buffer overflow in IMAP EXAMINE (EmphasisMine)	???	2017-03-20	http://www-01.ibm.com/support/docview.wss?uid=swg22002280	???	???	???
178	CVE-2017-3881	Cisco	IOS	Memory Corruption	Buffer overflow in IOS Cluster Management Protocol	???	2017-03-17	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp	https://artkond.com/2017/04/10/cisco-catalyst-remote-code-execution/	???	Vault 7 Disclosure
179	CVE-2017-0149	Microsoft	Internet Explorer	Memory Corruption	Memory corruption in VBScript rtJoin	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-006	https://twitter.com/jq0904/status/1062168435818283008	???	???
180	CVE-2017-0022	Microsoft	XML Core Services	Information Leak	Information leak in MSXML version resource	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-022	https://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-0022-microsoft-patches-vulnerability-exploited-adgholas-neutrino/	???	Will Matcalf of Proofpoint, Kafeine of Proofpoint, Joseph C Chen of Trend Micro, Brooks Li of Trend Micro
181	CVE-2017-0005	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in GDI	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-013	https://cloudblogs.microsoft.com/microsoftsecure/2017/03/27/detecting-and-mitigating-elevation-of-privilege-exploit-for-cve-2017-0005/	???	Lockheed Martin Computer Incident Response Team
182	CVE-2017-0143	Microsoft	Windows	Memory Corruption	Type confusion in SMB messages (EternalSynergy)	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-010	https://blogs.technet.microsoft.com/srd/2017/07/13/eternal-synergy-exploit-analysis/	???	???
183	CVE-2017-0144	Microsoft	Windows	Memory Corruption	Buffer overflow in SMB File Extended Attributes (EternalBlue)	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-010	https://research.checkpoint.com/eternalblue-everything-know/	???	???
184	CVE-2017-0145	Microsoft	Windows	Memory Corruption	Unspecified type confusion in SMB (EternalRomance)	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-010	https://www.microsoft.com/security/blog/2017/06/16/analysis-of-the-shadow-brokers-release-and-mitigation-with-windows-10-virtualization-based-security/	???	???
185	CVE-2017-0146	Microsoft	Windows	Memory Corruption	Race condition in SMB transactions (EternalChampion)	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-010	https://blogs.technet.microsoft.com/srd/2017/06/29/eternal-champion-exploit-analysis/	???	???
186	CVE-2017-0147	Microsoft	Windows	Information Leak	Information leak in SMB transactions (EternalChampion)	???	2017-03-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-010	https://blogs.technet.microsoft.com/srd/2017/06/29/eternal-champion-exploit-analysis/	???	???
187	CVE-2016-7892	Adobe	Flash	Memory Corruption	Unspecified use-after-free issue	???	2016-12-13	https://helpx.adobe.com/security/products/flash-player/apsb16-39.html	???	???	Anonymous researcher working with JPCERT/CA
188	CVE-2016-9079	Mozilla	Firefox	Memory Corruption	Use-after-free in SVG Animation (Tor exploit)	2016-11-29	2016-11-30	https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/	https://bugzilla.mozilla.org/show_bug.cgi?id=1321066	???	Obscured Team
189	CVE-2016-7256	Microsoft	Windows	Memory Corruption	Memory corruption on OpenType fonts CFF name index	???	2016-11-08	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-132	https://asec.ahnlab.com/1050	???	Kijong Son of KrCERT/CC in Korean Internet & Security Agency (KISA)
190	CVE-2016-7255	Microsoft	Windows Kernel	Memory Corruption	Memory corruption in NtUserSetWindowLongPtr	2016-10-21	2016-11-08	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135	https://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/	???	Feike Hacquebord, Peter Pi, and Brooks Li of Trend Micro, Neel Mehta and Billy Leonard of Google’s Threat Analysis Group
191	CVE-2016-7855	Adobe	Flash	Memory Corruption	Unspecified use-after-free issue	2016-10-21	2016-10-26	https://helpx.adobe.com/security/products/flash-player/apsb16-36.html	https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html	???	Neel Mehta and Billy Leonard from Google's Threat Analysis Group
192	CVE-2016-5195	Linux	Kernel	Memory Corruption	Race condition in copy-on-write (DirtyCOW)	???	2016-10-18	https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails	???	???	Phil Oester
193	CVE-2016-3298	Microsoft	Internet Explorer	Information Leak	Information leak in Microsoft.XMLDOM	2016-04-12	2016-10-11	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118	https://blog.trendmicro.com/trendlabs-security-intelligence/cve-2016-3298-microsoft-fixes-another-ie-zero-day-used-in-adgholas/	???	???
194	CVE-2016-3393	Microsoft	Windows	Memory Corruption	Memory corruption in TTF cjComputeGLYPHSET_MSFT_GENERAL	???	2016-10-11	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-120	https://securelist.com/windows-zero-day-exploit-used-in-targeted-attacks-by-fruityarmor-apt/76396/	???	???
195	CVE-2016-7193	Microsoft	Office	Memory Corruption	Memory corruption in \dfrxst	???	2016-10-11	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-121	https://paper.seebug.org/288/	???	???
196	CVE-2016-3351	Microsoft	Internet Explorer	Information Leak	Information leak in a.mimeType	???	2016-09-13	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104	https://blog.trendmicro.com/trendlabs-security-intelligence/microsoft-patches-ieedge-zeroday-used-in-adgholas-malvertising-campaign/	???	Kafeine, Brooks Li ofTrend Micro
197	CVE-2016-4655	Apple	iOS	Information Leak	Information leak in kernel OSUnserializeBinary (Pegasus)	2016-08-15	2016-08-25	https://support.apple.com/en-us/HT207107	https://jndok.github.io/2016/10/04/pegasus-writeup/	???	Citizen Lab and Lookout
198	CVE-2016-4656	Apple	iOS	Memory Corruption	Use-after-free in kernel OSUnserializeBinary (Pegasus)	2016-08-15	2016-08-25	https://support.apple.com/en-us/HT207107	https://jndok.github.io/2016/10/04/pegasus-writeup/	???	Citizen Lab and Lookout
199	CVE-2016-4657	Apple	WebKit	Memory Corruption	Use-after-free in MarkedArgumentBuffer (Pegasus)	2016-08-15	2016-08-25	https://support.apple.com/en-us/HT207107	???	???	Citizen Lab and Lookout
200	CVE-2016-6366	Cisco	ASA	Memory Corruption	Buffer overflow in SNMP parsing (EXTRABACON)	2016-08-15	2016-08-17	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp	https://blog.silentsignal.eu/2016/08/25/bake-your-own-extrabacon/	???	Shadow Brokers
201	CVE-2016-6367	Cisco	ASA	Memory Corruption	Buffer overflow in CLI parsing (EPICBANANA)	2016-08-15	2016-08-17	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli	???	???	Shadow Brokers
202	CVE-2016-4171	Adobe	Flash	Memory Corruption	Memory corruption in ExecPolicy metadata parsing	???	2016-06-15	https://helpx.adobe.com/security/products/flash-player/apsb16-18.html	https://securelist.com/operation-daybreak/75100/	???	Anton Ivanov of Kaspersky
203	CVE-2016-4117	Adobe	Flash	Memory Corruption	Type confusion in tvsdk DeleteRangeTimelineOperation	2016-05-08	2016-05-12	https://helpx.adobe.com/security/products/flash-player/apsb16-15.html	https://www.fireeye.com/blog/threat-research/2016/05/cve-2016-4117-flash-zero-day.html	???	Genwei Jiang of FireEye, Inc
204	CVE-2016-0189	Microsoft	Internet Explorer	Memory Corruption	Memory corruption in VBScript AccessArray	???	2016-05-10	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051	https://theori.io/research/cve-2016-0189	???	???
205	CVE-2016-0162	Microsoft	Internet Explorer	Information Leak	Unspecified file detection issue	???	2016-04-12	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-037	https://www.welivesecurity.com/2016/12/06/readers-popular-websites-targeted-stealthy-stegano-exploit-kit-hiding-pixels-malicious-ads/	???	Ladislav Janko, working with ESET
206	CVE-2016-0165	Microsoft	Windows Kernel	Memory Corruption	Buffer overflow in RGNMEMOBJ::vCreate	???	2016-04-12	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039	https://www.secureauth.com/blog/ms16-039-windows-10-64-bits-integer-overflow-exploitation-by-using-gdi-objects	???	Sebastian Apelt of Siberas working with Trend Micro's Zero Day Initiative, Anton Ivanov of Kaspersky Lab
207	CVE-2016-0167	Microsoft	Windows Kernel	Memory Corruption	Use-after-free in win32k!xxxMNDestroyHandler	2016-03-08	2016-04-12	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039	https://www.fireeye.com/blog/threat-research/2016/05/windows-zero-day-payment-cards.html	???	Dhanesh Kizhakkinan of FireEye, Inc.
208	CVE-2016-1019	Adobe	Flash	Memory Corruption	Type confusion in FileReference	2016-04-02	2016-04-07	https://helpx.adobe.com/security/products/flash-player/apsb16-10.html	https://blog.trendmicro.com/trendlabs-security-intelligence/look-adobe-flash-player-cve-2016-1019-zero-day-vulnerability/	???	Kafeine (EmergingThreats/Proofpoint), Genwei Jiang (FireEye, Inc.), Clement Lecigne of Google
209	CVE-2016-1010	Adobe	Flash	Memory Corruption	Buffer overflow in BitmapData.copyPixels	???	2016-03-10	https://helpx.adobe.com/security/products/flash-player/apsb16-08.html	https://blog.trendmicro.com/trendlabs-security-intelligence/root-cause-analysis-recent-flash-zero-day-vulnerability-cve-2016-1010/	???	Anton Ivanov of Kaspersky Lab
210	CVE-2016-0984	Adobe	Flash	Memory Corruption	Use-after-free in Sound.loadPCMFromByteArray	2016-01-11	2016-02-09	https://helpx.adobe.com/security/products/flash-player/apsb16-04.html	https://bugs.chromium.org/p/project-zero/issues/detail?id=698&redir=1	???	Natalie Silvanovich of Google Project Zero
211	CVE-2016-0034	Microsoft	Silverlight	Memory Corruption	Memory corruption in BinaryReader	2015-11-25	2016-01-12	https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2016/ms16-006	https://securelist.com/blog/research/73255/the-mysterious-case-of-cve-2016-0034-the-hunt-for-a-microsoft-silverlight-0-day/	???	Anton Ivanov and Costin Raiu of Kaspersky Lab
212	CVE-2015-8651	Adobe	Flash	Memory Corruption	Integer overflow in domainMemory	???	2015-12-28	https://helpx.adobe.com/security/products/flash-player/apsb16-01.html	???	???	???
213	CVE-2015-6175	Microsoft	Windows Kernel	Memory Corruption	Memory corruption in gpuenergydrv.sys	???	2015-12-08	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-135	???	???	ChenDong Li of Tencent
214	CVE-2015-4902	Oracle	Java	Logic/Design Flaw	Click-to-play bypass	???	2015-10-20	https://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	https://blog.trendmicro.com/trendlabs-security-intelligence/new-headaches-how-the-pawn-storm-zero-day-evaded-javas-click-to-play-protection/	???	Trend Micro
215	CVE-2015-7645	Adobe	Flash	Type Confusion	Type confusion in IExternalizable.writeExternal	2015-10-13	2015-10-16	https://helpx.adobe.com/security/products/flash-player/apsb15-27.html	https://bugs.chromium.org/p/project-zero/issues/detail?id=547	???	Peter Pi of Trend Micro, Natalie Silvanovich of Google Project Zero
216	CVE-2015-2546	Microsoft	Windows Kernel	Memory Corruption	Use-after-free in xxxSendMessage (tagPOPUPMENU)	???	2015-09-08	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-097	https://www.fireeye.com/content/dam/fireeye-www/blog/pdfs/twoforonefinal.pdf	???	Wang Yu of FireEye
217	CVE-2015-2545	Microsoft	Office	Memory Corruption	Use-after-free in EPS forall operator	???	2015-09-08	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-099	https://www.fireeye.com/content/dam/fireeye-www/blog/pdfs/twoforonefinal.pdf	???	Genwei Jiang of FireEye
218	CVE-2015-2502	Microsoft	Internet Explorer	Memory Corruption	Use-after-free in CMarkup::ReparentTableSection	???	2015-08-18	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-093	https://twitter.com/Laughing_Mantis/statuses/633839231840841728	???	Clement Lecigne of Google
219	CVE-2015-1642	Microsoft	Office	Memory Corruption	Use-after-free in CTaskSymbol	2015-02-27	2015-08-11	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081	https://labs.mwrinfosecurity.com/advisories/2015/08/17/microsoft-office-ctasksymbol-use-after-free-vulnerability/	???	Fortinet's FortiGuard Labs, Yong Chuan Koh (@yongchuank) of MWR Labs, s3tm3m@gmail.com working with VeriSign iDefense Labs
220	CVE-2015-1769	Microsoft	Windows	Logic/Design Flaw	Symbolic link attack in Mount Manager	???	2015-08-11	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-085	http://h3ysatan.blogspot.com/2016/01/cve-2015-1769-cve-2015-1769-mount.html	???	???
221	CVE-2015-4495	Mozilla	Firefox	Logic/Design Flaw	Same-origin policy bypass in PDF reader	2015-08-05	2015-08-06	https://www.mozilla.org/en-US/security/advisories/mfsa2015-78/	https://blog.mozilla.org/security/2015/08/06/firefox-exploit-found-in-the-wild/	???	Cody Crews
222	CVE-2015-2426	Microsoft	Windows	Memory Corruption	OpenType Font Driver buffer overflow in ZwGdiAddFontMemResourceEx	2015-07-05	2015-07-20	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-078	http://blog.trendmicro.com/trendlabs-security-intelligence/hacking-team-leak-uncovers-another-windows-zero-day-ms-releases-patch/	???	Mateusz Jurczyk of Google Project Zero, Genwei Jiang of FireEye, Moony Li of TrendMicro
223	CVE-2015-5122	Adobe	Flash	Use-after-free	Use-after-free in TextBlock	2015-07-05	2015-07-14	https://helpx.adobe.com/security/products/flash-player/apsb15-18.html	https://blog.trendmicro.com/trendlabs-security-intelligence/another-zero-day-vulnerability-arises-from-hacking-team-data-leak/	???	Dhanesh Kizhakkinan of FireEye
224	CVE-2015-5123	Adobe	Flash	Use-after-free	Use-after-free in BitmapData	2015-07-05	2015-07-14	https://helpx.adobe.com/security/products/flash-player/apsb15-18.html	https://blog.trendmicro.com/trendlabs-security-intelligence/new-zero-day-vulnerability-cve-2015-5123-in-adobe-flash-emerges-from-hacking-team-leak/	???	Peter Pi of TrendMicro and slipstream/RoL (@TheWack0lian)
225	CVE-2015-2387	Microsoft	Windows Kernel	Memory Corruption	ATMFD.DLL named escape memory corruption	2015-07-05	2015-07-14	https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-077	https://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/	???	Google Project Zero and Morgan Marquis-Boire
226	CVE-2015-2425	Microsoft	Internet Explorer	Use-after-free	Use-after-free in MutationObserver	2015-07-05	2015-07-14	https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-065	https://blog.trendmicro.com/trendlabs-security-intelligence/gifts-from-hacking-team-continue-ie-zero-day-added-to-mix/	???	Bill Finlayson of Vectra Networks, Dhanesh Kizhakkinan of FireEye, Peter Pi of TrendMicro
227	CVE-2015-2424	Microsoft	Office	Memory Corruption	Heap corruption in Forms.Image.1	2015-06-30	2015-07-14	https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-070	https://web.archive.org/web/20150717041821/http://www.isightpartners.com/2015/07/microsoft-office-zero-day-cve-2015-2424-leveraged-by-tsar-team/	???	The Labs Team of iSIGHT Partners, Edward Fjellskål of Telenor CERT
228	CVE-2015-2590	Oracle	Java	Race Condition	Race condition in ObjectInputStream.readSerialData	???	2015-07-14	https://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	https://twitter.com/tiraniddo/status/621308239909646336	???	Trend Micro
229	CVE-2015-5119	Adobe	Flash	Use-after-free	Use-after-free in ByteArray ValueOf	2015-07-05	2015-07-08	https://helpx.adobe.com/security/products/flash-player/apsb15-16.html	https://blog.trendmicro.com/trendlabs-security-intelligence/unpatched-flash-player-flaws-more-pocs-found-in-hacking-team-leak/	???	Google Project Zero and Morgan Marquis-Boire
230	CVE-2015-3113	Adobe	Flash	Memory Corruption	Buffer overflow in FLV media parsing	???	2015-06-23	https://helpx.adobe.com/security/products/flash-player/apsb15-14.html	https://blog.trendmicro.com/trendlabs-security-intelligence/new-adobe-zero-day-shares-same-root-cause-as-older-flaws/	???	FireEye
231	CVE-2015-2360	Microsoft	Windows Kernel	Memory Corruption	Use-after-free on tagCLS object	???	2015-06-09	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061	https://blog.trendmicro.com/trendlabs-security-intelligence/analysis-of-cve-2015-2360-duqu-2-0-zero-day-vulnerability/	???	Maxim Golovkin of Kaspersky Lab, enSilo Research Team
232	CVE-2015-1701	Microsoft	Windows Kernel	Logic/Design Flaw	CreateWindow callback validation error	2015-04-18	2015-05-12	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051	https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html	???	???
233	CVE-2015-3043	Adobe	Flash	Memory Corruption	Buffer overflow in FLV media parsing	2015-04-13	2015-04-14	https://helpx.adobe.com/security/products/flash-player/apsb15-06.html	https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html	???	Anonymous
234	CVE-2015-1641	Microsoft	Office	Memory Corruption	Type confusion in SmartTag element	???	2015-04-14	https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-033	https://paper.seebug.org/351/	???	The Labs Team of iSIGHT Partners
235	CVE-2015-0071	Microsoft	Internet Explorer	Information Leak	Out-of-bounds read in Js::JavascriptRegExpConstructor::SetProperty	???	2015-02-10	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009	http://blog.trendmicro.com/trendlabs-security-intelligence/bypassing-aslr-with-cve-2015-0071-an-out-of-bounds-read-vulnerability/	???	Clement Lecigne of Google, The Labs Team of iSIGHT Partners
236	CVE-2015-0313	Adobe	Flash	Use-after-free	Use-after-free in ByteArray::Clear	2015-01-14	2015-02-05	https://helpx.adobe.com/security/products/flash-player/apsb15-04.html	http://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-cve-2015-0313-the-new-flash-player-zero-day/	???	Elia Florio and Dave Weston of Microsoft, and Peter Pi of Trend Micro
237	CVE-2015-0311	Adobe	Flash	Use-after-free	Use-after-free in ByteArray::UncompressViaZlibVariant	2015-01-20	2015-01-27	https://helpx.adobe.com/security/products/flash-player/apsb15-03.html	https://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-cve-2015-0311-flash-zero-day-vulnerability/	???	Kafeine of Malware don’t need Coffee and Jack Tang of Trend Micro
238	CVE-2015-0310	Adobe	Flash	Information Leak	Out-of-bounds read in RegExp::exec	2015-01-16	2015-01-22	https://helpx.adobe.com/security/products/flash-player/apsb15-02.html	https://bugs.chromium.org/p/chromium/issues/detail?id=442585	???	Yang Dingning, working with the Chromium Vulnerability Rewards Program, Timo Hirvonen of F-Secure and Kafeine
239	CVE-2015-0016	Microsoft	Windows	Logic/Design Flaw	Improper path validation leads to IE sandbox escape	???	2015-01-13	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-004	http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox/	???	Liam O’Murchu of Symantec
240	CVE-2014-9163	Adobe	Flash	Memory Corruption	Unspecified stack buffer overflow in Flash	???	2014-12-09	https://helpx.adobe.com/security/products/flash-player/apsb14-27.html	???	???	bilou working with HP’s Zero Day Initiative
241	CVE-2014-6324	Microsoft	Windows	Logic/Design Flaw	Logic/design flaw in Kerberos KDC allowing remote domain controller escalation of privilege	???	2014-11-18	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-068	https://blogs.technet.microsoft.com/srd/2014/11/18/additional-information-about-cve-2014-6324/	???	The Qualcomm Information Security & Risk Management team, with special recognition for Tom Maddock
242	CVE-2014-6352	Microsoft	Office	Logic/Design Flaw	Logic/design flaw in Packager OLE class	???	2014-11-11	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-064	https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/bypassing-microsofts-patch-for-the-sandworm-zero-day-even-editing-can-cause-harm/	???	Drew Hintz, Shane Huntley, and Matty Pellegrino of Google Security Team
243	CVE-2014-4077	Microsoft	Windows	Logic/Design Flaw	Unspecified sandbox escape vulnerability in IME (Japanese)	???	2014-11-11	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-078	???	???	Vitaly Kamluk and Costin Raiu of Kaspersky Lab
244	CVE-2014-4113	Microsoft	Windows	Memory Corruption	NULL pointer dereference in win32k!win32k!xxxHandleMenuMessages	???	2014-10-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-058	https://www.fireeye.com/blog/threat-research/2014/10/two-targeted-attacks-two-new-zero-days.html	???	CrowdStrike Intelligence Team & FireEye, Inc.
245	CVE-2014-4114	Microsoft	Office	Logic/Design Flaw	Logic/design flaw in Packager OLE class	???	2014-10-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-060	https://blog.trendmicro.com/trendlabs-security-intelligence/an-analysis-of-windows-zero-day-vulnerability-cve-2014-4114-aka-sandworm/	???	iSIGHT Partners and researchers from ESET
246	CVE-2014-4148	Microsoft	Windows	Memory Corruption	Unspecified memory corruption in TrueType fonts	???	2014-10-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-058	https://www.fireeye.com/blog/threat-research/2014/10/two-targeted-attacks-two-new-zero-days.html	???	FireEye, Inc.
247	CVE-2014-8439	Adobe	Flash	Memory Corruption	Unspecified memory corruption in Flash	???	2014-10-14	https://helpx.adobe.com/security/products/flash-player/apsb14-22.html	???	???	???
248	CVE-2014-4123	Microsoft	Internet Explorer	Memory Corruption	Unspecified sandbox escape vulnerability	???	2014-10-14	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056	???	???	James Forshaw of Context Information Security
249	CVE-2014-0546	Adobe	Reader	Logic/Design Flaw	Unspecified sandbox escape vulnerability	???	2014-08-12	https://helpx.adobe.com/security/products/acrobat/apsb14-19.html	???	???	Costin Raiu and Vitaly Kamluk of Kaspersky Labs
250	CVE-2014-2817	Microsoft	Internet Explorer	Logic/Design Flaw	Sandbox escape in IIEAxInstallBrokerBrokerPtr	???	2014-08-12	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-051	https://twitter.com/tiraniddo/status/522135160675127296	???	James Forshaw of Context Information Security
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500

	A	B	C	D	E	F	G	H	I	J	K
1	CVE	Vendor	Product	Type	Description	Date Discovered	Date Patched	Advisory	Analysis URL	Root Cause Analysis	Reported By
2	CVE-2023-21674	Microsoft	Windows	Memory Corruption	ALPC elevation of privilege	???	2023-01-10	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21674	???	???	Jan Vojtěšek, Milánek, and Przemek Gmerek with Avast

	A	B	C	D	E	F	G	H	I	J	K
1	CVE	Vendor	Product	Type	Description	Date Discovered	Date Patched	Advisory	Analysis URL	Root Cause Analysis	Reported By
2	CVE-2022-21882	Microsoft	Windows	Memory Corruption	Win32k Elevation of Privilege	???	2022-01-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-21882.html	Big CJTeam of Tianfu Cup & RyeLv (@b2ahex)
3	CVE-2022-22587	Apple	iOS	Memory Corruption	Memory corruption in IOMobileFrameBuffer	???	2022-01-26	https://support.apple.com/en-us/HT213053	???	???	Meysam Firouzi (@R00tkitSMM) of MBition - Mercedes-Benz Innovation Lab, Siddharth Aeri (@b1n4r1b01), & an anonymous reporter
4	CVE-2022-22620	Apple	WebKit	Memory Corruption	Unspecified use-after-free	???	2022-02-10	https://support.apple.com/en-us/HT213093	https://googleprojectzero.blogspot.com/2022/06/an-autopsy-on-zombie-in-wild-0-day.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-22620.html	???
5	CVE-2022-0609	Google	Chrome	Memory Corruption	Use-after-free in Animation	2022-02-10	2022-02-15	https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html	https://blog.google/threat-analysis-group/countering-threats-north-korea/	???	Adam Weidemann and Clément Lecigne of Google's Threat Analysis Group
6	CVE-2022-26485	Mozilla	Firefox	Memory Corruption	Use-after-free inXSLT parameter processing	???	2022-03-05	https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/	???	???	Wang Gang, Liu Jialei, Du Sihang, Huang Yi & Yang Kang of 360 ATA
7	CVE-2022-26486	Mozilla	Firefox	Memory Corruption	Use-after-free in WebGPU IPC Framework	???	2022-03-05	https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/	???	???	Wang Gang, Liu Jialei, Du Sihang, Huang Yi & Yang Kang of 360 ATA
8	CVE-2021-22600	Google	Pixel	Memory Corruption	Double free in packet_set_ring	???	2022-03-07	https://source.android.com/security/bulletin/pixel/2022-03-01	???	???	???
9	CVE-2021-39793	Google	Pixel	Memory Corruption	Out-of-bounds write in mali_base_mem	???	2022-03-07	https://source.android.com/security/bulletin/pixel/2022-03-01	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-39793.html	???
10	CVE-2022-1040	Sophos	Firewall	Logic/Design Flaw	Authentication bypass allowing RCE	???	2022-03-25	https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce	https://news.sophos.com/en-us/2022/06/15/sophos-uncovers-how-apt-groups-carried-out-highly-targeted-attack/	???	???
11	CVE-2022-1096	Google	Chrome	Memory Corruption	Type confusion in V8	2022-03-23	2022-03-25	https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1096.html	???
12	CVE-2022-22674	Apple	macOS	Memory Corruption	Out-of-bounds read in Intel Graphics Driver	???	2022-03-31	https://support.apple.com/en-us/HT213220	???	???	???
13	CVE-2022-22675	Apple	iOS/macOS	Memory Corruption	Out-of-bounds write in AppleAVD	???	2022-03-31	https://support.apple.com/en-us/HT213220	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-22675.html	???
14	CVE-2022-26871	Trend Micro	Apex Central	Logic/Design Flaw	Arbitrary file upload remote code execution	???	2022-03-31	https://success.trendmicro.com/dcx/s/solution/000290678?language=en_US	???	???	Trend Micro Research
15	CVE-2022-24521	Microsoft	Windows	Memory Corruption	Windows Common Log File System Driver Elevation of Privilege	???	2022-04-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24521	https://www.pixiepointsecurity.com/blog/nday-cve-2022-24521.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-24521.html	National Security Agency, Adam Podlosky and Amir Bazine of Crowdstrike
16	CVE-2022-1364	Google	Chrome	Memory Corruption	Type confusion in V8	2022-04-13	2022-04-14	https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1364.html	Clément Lecigne of Google's Threat Analysis Group
17	CVE-2022-26925	Microsoft	Windows	Logic/Design Flaw	Windows LSA Spoofing Vulnerability	???	2022-05-10	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26925	???	???	Raphael John with Bertelsmann Printing Group
18	CVE-2022-30190	Microsoft	Windows	Logic/Design Flaw	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	???	2022-06-14	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190	https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e	???	crazyman with Shadow Chaser Group
19	CVE-2022-26134	Atlassian	Confluence Server & Data Center	Logic/Design Flaw	Unauthenticated Remote Code Execution	2022-05-31	2022-06-03	https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html	https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/	???	Volexity
20	CVE-2022-2294	Google	Chrome	Memory Corruption	Buffer overflow in WebRTC	2022-07-01	2022-07-04	https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-2294.html	Jan Vojtesek from the Avast Threat Intelligence team
21	CVE-2022-22047	Microsoft	Windows	Memory Corruption	CSRSS Elevation of Privilege	???	2022-07-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047	???	???	Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC)
22	CVE-2022-2856	Google	Chrome	Logic/Design Flaw	Insufficient validation of untrusted input in Intents	2022-07-19	2022-08-16	https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html	???	???	Ashley Shen and Christian Resell of Google Threat Analysis Group
23	CVE-2022-32894	Apple	iOS/macOS	Memory Corruption	Kernel out-of-bounds write	???	2022-08-17	https://support.apple.com/en-us/HT213413	???	???	???
24	CVE-2022-32893	Apple	WebKit	Memory Corruption	Out-of-bounds write	???	2022-08-17	https://support.apple.com/en-us/HT213413	???	???	???
25	CVE-2022-3075	Google	Chrome	Logic/Design Flaw	Insufficient data validation in Mojo	2022-08-30	2022-09-02	https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html	???	???	???
26	CVE-2022-32917	Apple	iOS/macOS	Memory Corruption	Unspecified kernel vulnerability	???	2022-09-12	https://support.apple.com/en-us/HT213445	???	???	???
27	CVE-2022-41033	Microsoft	Windows	Memory Corruption	COM+ event system service elevation of privilege	???	2022-10-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41033	???	???	???
28	CVE-2022-42827	Apple	iOS	Memory Corruption	Out-of-bounds write in the kernel	???	2022-10-24	https://support.apple.com/en-us/HT213489	???	???	???
29	CVE-2022-3723	Google	Chrome	Memory Corruption	Type confusion in V8	2022-10-25	2022-10-27	https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html	???	???	Jan Vojtěšek, Milánek, and Przemek Gmerek of Avast
30	CVE-2022-41040	Microsoft	Exchange Server	Logic/Design Flaw	Server-side request forgery	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41040	???	???	DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC working with Trend Micro Zero Day Initiative
31	CVE-2022-41082	Microsoft	Exchange Server	Logic/Design Flaw	Remote code execution	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41082	???	???	Piotr Bazydlo (@chudypb) and DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC working with Trend Micro Zero Day Initiative
32	CVE-2022-41128	Microsoft	Internet Explorer	Memory Corruption	JScript9 remote code execution	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-41128.html	Clément Lecigne of Google’s Threat Analysis Group
33	CVE-2022-41073	Microsoft	Windows	Memory Corruption	Print spooler elevation of privilege	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073	???	???	Microsoft Threat Intelligence Center (MSTIC)
34	CVE-2022-41125	Microsoft	Windows	Memory Corruption	CNG Key Isolation Service elevation of privilege	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125	???	???	Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC)
35	CVE-2022-4135	Google	Chrome	Memory Corruption	Heap buffer overflow in GPU	2022-11-22	2022-11-24	https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html	???	???	Clement Lecigne of Google's Threat Analysis Group
36	CVE-2022-42856	Apple	WebKit	Memory Corruption	Type confusion	???	2022-11-30	https://support.apple.com/en-us/HT213516	???	???	Clément Lecigne of Google's Threat Analysis Group
37	CVE-2022-4262	Google	Chrome	Memory Corruption	Type confusion in V8	2022-11-29	2022-12-02	https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html	???	???	Clement Lecigne of Google's Threat Analysis Group

	A	B	C	D	E	F	G	H	I	J	K
1	CVE	Vendor	Product	Type	Description	Date Discovered	Date Patched	Advisory	Analysis URL	Root Cause Analysis	Reported By
2	CVE-2020-11261	Qualcomm	Android	Logic/Design Flaw	Memory management logic error in kgsl driver	2020-07-20	2021-01-04	https://source.android.com/security/bulletin/2021-01-01	???	???	Man Yue Mo of GitHub Security Lab
3	CVE-2021-1647	Microsoft	Windows Defender	Memory Corruption	Unspecified remote code execution in Windows Defender	???	2021-01-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1647	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1647.html	???
4	CVE-2021-1782	Apple	iOS	Memory Corruption	Unspecified kernel race condition	???	2021-01-26	https://support.apple.com/en-us/HT212146	https://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html	???	???
5	CVE-2021-1870	Apple	WebKit	Logic/Design Flaw	Unspecified logic flaw in Webkit	???	2021-01-26	https://support.apple.com/en-us/HT212146	???	???	???
6	CVE-2021-1871	Apple	WebKit	Logic/Design Flaw	Unspecified logic flaw in Webkit	???	2021-01-26	https://support.apple.com/en-us/HT212146	???	???	???
7	CVE-2021-21148	Google	Chrome	Memory Corruption	Heap buffer overflow in V8	2021-01-24	2021-02-04	https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html	???	???	Mattias Buelens
8	CVE-2021-21017	Adobe	Reader	Memory Corruption	Heap-based buffer overflow	???	2021-02-09	https://helpx.adobe.com/security/products/acrobat/apsb21-09.html	https://github.com/ZeusBox/CVE-2021-21017	???	???
9	CVE-2021-1732	Microsoft	Windows	Memory Corruption	Unspecified win32k escalation of privilege	2020-12-10	2021-02-09	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1732	https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1732.html	JinQuan, MaDongZe, TuXiaoYi, and LiHao of DBAPPSecurity Co., Ltd
10	CVE-2021-26855	Microsoft	Exchange Server	Logic/Design Flaw	Server-side request forgery (SSRF)	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-26855.html	Volexity, Orange Tsai from DEVCORE research team, and Microsoft Threat Intelligence Center (MSTIC)
11	CVE-2021-26857	Microsoft	Exchange Server	Logic/Design Flaw	Insecure deserialization in the Unifed Messaging service	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	???	Dubex and Microsoft Threat Intelligence Center (MSTIC)
12	CVE-2021-26858	Microsoft	Exchange Server	Logic/Design Flaw	Arbitrary file write	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	???	Microsoft Threat Intelligence Center
13	CVE-2021-27065	Microsoft	Exchange Server	Logic/Design Flaw	Arbitrary file write	???	2021-03-02	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065	https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/	???	Volexity, Orange Tsai from DEVCORE research team, and Microsoft Threat Intelligence Center (MSTIC)
14	CVE-2021-21166	Google	Chrome	Memory Corruption	Object lifecycle issue in audio	2021-02-11	2021-03-02	https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-21166.html	Alison Huffman, Microsoft Browser Vulnerability Research & Clement Lecigne of Google Threat Analysis Group
15	CVE-2021-26411	Microsoft	Internet Explorer	Memory Corruption	Use-after-free in MSHTML	???	2021-03-09	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26411	https://enki.co.kr/blog/2021/02/04/ie_0day.html	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-26411.html	yangkang(@dnpushme) & huangyi(@C0rk1_H) & Enki
16	CVE-2021-21193	Google	Chrome	Memory Corruption	Use-after-free in Blink	2021-03-09	2021-03-12	https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html	???	???	???
17	CVE-2021-1879	Apple	WebKit	UXSS	Universal cross site scripting in Webkit	???	2021-03-26	https://support.apple.com/en-us/HT212256	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1879.html	Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group
18	CVE-2021-28310	Microsoft	Windows	Memory Corruption	Out-of-bounds write vulnerability in dwmcore.dll	???	2021-04-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28310	https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/	???	Boris Larin (Oct0xor) of Kaspersky Lab
19	CVE-2021-21206	Google	Chrome	Memory Corruption	Use-after-free in Blink	2021-04-07	2021-04-13	https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html	???	???	???
20	CVE-2021-30661	Apple	WebKit	Memory Corruption	Use-after-free in WebKit	???	2021-04-26	https://support.apple.com/en-us/HT212317	???	???	yangkang(@dnpushme) of 360 ATA
21	CVE-2021-30665	Apple	WebKit	Memory Corruption	Memory corruption related to state management in Webkit	???	2021-05-03	https://support.apple.com/en-us/HT212336	???	???	yangkang (@dnpushme)&zerokeeper&bianliang of 360 ATA
22	CVE-2021-30663	Apple	WebKit	Memory Corruption	Integer overflow in Webkit	???	2021-05-03	https://support.apple.com/en-us/HT212336	???	???	???
23	CVE-2021-1905	Qualcomm	Android	Memory Corruption	Use-after-free in GPU	2020-11-17	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1905.html	???
24	CVE-2021-1906	Qualcomm	Android	Logic/Design Flaw	Improper error handling in GPU	2020-11-17	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	???	???	???
25	CVE-2021-28663	ARM	Android	Memory Corruption	Use-after-free in Mali GPU	???	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	https://github.com/lntrx/CVE-2021-28663	???	???
26	CVE-2021-28664	ARM	Android	Memory Corruption	Writes to read-only memory in Mali GPU	???	2021-05-03	https://source.android.com/security/bulletin/2021-05-01	???	???	???
27	CVE-2021-28550	Adobe	Reader	Memory Corruption	Use-after-free	???	2021-05-11	https://helpx.adobe.com/security/products/acrobat/apsb21-29.html	???	???	???
28	CVE-2021-31955	Microsoft	Windows	Logic/Design Flaw	Kernel information disclosure in SuperFetch	2021-04-14	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31955	https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/	???	Boris Larin (Oct0xor) of Kaspersky Lab
29	CVE-2021-31956	Microsoft	Windows	Memory Corruption	Heap-based buffer overflow in ntfs.sys	2021-04-14	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31956	https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/	???	Boris Larin (Oct0xor) of Kaspersky Lab
30	CVE-2021-33742	Microsoft	Internet Explorer	Memory Corruption	Out-of-bounds write in MSHTML	2021-06-03	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33742	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-33742.html	Clément Lecigne of Google’s Threat Analysis Group
31	CVE-2021-31199	Microsoft	Windows	???	Unspecified enhanced crypto provider escalation of privilege	???	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31199	???	???	???
32	CVE-2021-31201	Microsoft	Windows	???	Unspecified enhanced crypto provider escalation of privilege	???	2021-06-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31201	???	???	???
33	CVE-2021-30551	Google	Chrome	Memory Corruption	Type confusion in v8	2021-06-03	2021-06-09	https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html	https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30551.html	Clement Lecigne of Google's Threat Analysis Group and Sergei Glazunov of Google Project Zero
34	CVE-2021-30554	Google	Chrome	Memory Corruption	Use-after-free in WebGL	2021-06-15	2021-06-17	https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html	???	???	???
35	CVE-2021-33771	Microsoft	Windows	Memory Corruption	Unspecified kernel escalation of privilege	???	2021-07-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33771	https://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/	???	Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)
36	CVE-2021-34448	Microsoft	Internet Explorer	Memory Corruption	Unspecified scripting engine memory corruption	???	2021-07-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34448	???	???	yangkang(@dnpushme)&bianliang&wanggang&lihongfei of 360 ATA
37	CVE-2021-31979	Microsoft	Windows	Memory Corruption	Unspecified kernel escalation of privilege	???	2021-07-13	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31979	https://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/	???	Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)
38	CVE-2021-30563	Google	Chrome	Memory Corruption	Type confusion in v8	2021-07-12	2021-07-15	https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html	???	???	???
39	CVE-2021-30807	Apple	iOS	Memory Corruption	Memory corruption in IOMobileFrameBuffer	???	2021-07-26	https://support.apple.com/en-us/HT212623	https://saaramar.github.io/IOMobileFrameBuffer_LPE_POC/	???	???
40	CVE-2021-36948	Microsoft	Windows	???	Windows update medic service elevation of privilege	???	2021-08-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36948	???	???	Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)
41	CVE-2021-30860	Apple	iOS	Memory Corruption	Integer overflow in CoreGraphics	2021-09-07	2021-09-13	https://support.apple.com/en-us/HT212807	https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html	???	The Citizen Lab
42	CVE-2021-30858	Apple	WebKit	Memory Corruption	Use-after-free in Indexed DB	???	2021-09-13	https://support.apple.com/en-us/HT212807	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-30858.html	???
43	CVE-2021-30632	Google	Chrome	Memory Corruption	Out of bounds write in V8	2021-09-08	2021-09-13	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html	https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_30632/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-30632.html	???
44	CVE-2021-30633	Google	Chrome	Memory Corruption	Use-after-free in Indexed DB	2021-09-08	2021-09-13	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html	???	???	???
45	CVE-2021-31010	Apple	iOS	Logic/Design Flaw	Vulnerability in CommCenter	???	2021-09-13	https://support.apple.com/en-us/HT212807	https://googleprojectzero.blogspot.com/2022/03/forcedentry-sandbox-escape.html	???	The Citizen Lab & Google Project Zero
46	CVE-2021-40444	Microsoft	Internet Explorer	Logic/Design Flaw	Unspecified remote code execution in MSHTML	???	2021-09-14	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444	https://billdemirkapi.me/unpacking-cve-2021-40444-microsoft-office-rce/	???	Rick Cole (MSTIC), Dhanesh Kizhakkinan of Mandiant, Genwei Jiang of Mandiant, Haifei Li of EXPMON, and Byce Abdo of Mandiant
47	CVE-2021-30869	Apple	macOS	Memory Corruption	Type confusion in XNU	???	2021-09-23	https://support.apple.com/en-us/HT212825	https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/	???	Erye Hernandez of Google Threat Analysis Group, Clément Lecigne of Google Threat Analysis Group, and Ian Beer of Google Project Zero
48	CVE-2021-37973	Google	Chrome	Memory Corruption	Use-after-free in Portals	2021-09-21	2021-09-24	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	???	Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero
49	CVE-2021-37975	Google	Chrome	Memory Corruption	Use-after-free in V8	2021-09-24	2021-09-30	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html	https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-37975.html	???
50	CVE-2021-37976	Google	Chrome	Memory Corruption	Information leak in Core	2021-09-21	2021-09-30	https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	???	Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero
51	CVE-2021-41773	Apache	HTTP Server	Logic/Design Flaw	Path traversal & file disclosure vulnerability	2021-09-29	2021-10-04	https://httpd.apache.org/security/vulnerabilities_24.html	???	???	Ash Daulton along with the cPanel Security Team
52	CVE-2021-30883	Apple	iOS	Memory Corruption	A memory corruption issue in IOMobileFrameBuffer	???	2021-10-11	https://support.apple.com/en-us/HT212846	https://saaramar.github.io/IOMFB_integer_overflow_poc/	???	???
53	CVE-2021-40449	Microsoft	Windows	Memory Corruption	Use-after-free in Win32k	???	2021-10-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40449	https://securelist.com/mysterysnail-attacks-with-windows-zero-day/104509/	???	Boris Larin (oct0xor) with Kaspersky
54	CVE-2021-38000	Google	Chrome	Logic/Design Flaw	Insufficient validation of untrusted input in Intents	2021-09-15	2021-10-28	https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-38000.html	Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group
55	CVE-2021-38003	Google	Chrome	Memory Corruption	Inappropriate implementation in V8	2021-10-26	2021-10-28	https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	???	Clément Lecigne from Google TAG and Samuel Groß from Google Project Zero
56	CVE-2021-0920	Google	Android	Memory Corruption	Race condition during SCM_RIGHTS garbage collection	???	2021-11-05	https://source.android.com/security/bulletin/2021-11-01#kernel-components	https://googleprojectzero.blogspot.com/2022/08/the-quantum-state-of-linux-kernel.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-0920.html	???
57	CVE-2021-1048	Google	Android	Memory Corruption	Use-after-free in ep_loop_check_proc	???	2021-11-06	https://source.android.com/security/bulletin/2021-11-01#2021-11-06-security-patch-level-vulnerability-details	https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1048.html	Clément Lecigne and Christian Resell from Google's Threat Analysis Group
58	CVE-2021-42292	Microsoft	Office	Logic/Design Flaw	Excel security feature bypass	???	2021-11-09	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42292	https://twitter.com/HaifeiLi/status/1486133229614616577	???	Microsoft Threat Intelligence Center (MSTIC)
59	CVE-2021-42321	Microsoft	Exchange Server	Logic/Design Flaw	Remote code execution	???	2021-11-09	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321	https://peterjson.medium.com/some-notes-about-microsoft-exchange-deserialization-rce-cve-2021-42321-110d04e8852	???	Microsoft Security Response Center, Microsoft Threat Intelligence Center (MSTIC), Yuhao Weng with Sangfor, and 漏洞研究院青训队 with Tianfu
60	CVE-2021-30983	Apple	iOS	Memory Corruption	Buffer overflow in IOMobileFrameBuffer	???	2021-12-13	https://support.apple.com/en-us/HT212976	https://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html	???	Pangu via Tianfu Cup
61	CVE-2021-25337	Samsung	Android	Logic/Design Flaw	Access control issues in clipboard provider	2020-11-03	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-25337.html	???
62	CVE-2021-25369	Samsung	Android	Logic/Design Flaw	Kernel info leak in sec_log	2020-12-10	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-25369.html	???
63	CVE-2021-25370	Samsung	Android	Memory Corruption	Use-after-free in dpu (DECON) driver	2020-12-10	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html	???	???
64	CVE-2021-25371	Samsung	Android	Logic/Design Flaw	Possible to load arbitrary ELF library inside DSP	2020-12-22	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
65	CVE-2021-25372	Samsung	Android	Memory Corruption	Out-of-bounds access vulnerability in DSP driver	2020-12-22	2021-03-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
66	CVE-2021-25394	Samsung	Android	Memory Corruption	Use-after-free in MFC charger driver	2020-12-31	2021-05-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
67	CVE-2021-25395	Samsung	Android	Memory Corruption	Use-after-free in MFC charger driver	2020-12-31	2021-05-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
68	CVE-2021-25487	Samsung	Android	Memory Corruption	Arbitrary code execution via OOB read in modem interface driver	2021-07-26	2021-10-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
69	CVE-2021-25489	Samsung	Android	Memory Corruption	Format string bug in modem interface driver	2021-07-16	2021-10-01	https://security.samsungmobile.com/securityUpdate.smsb	???	???	???
70	CVE-2021-4102	Google	Chrome	Memory Corruption	Use-after-free in V8	2021-12-09	2021-12-13	https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html	???	???	???
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

1

CVE

Vendor

Product

Type

Description

Date Discovered

Date Patched

Advisory

Analysis URL

Root Cause Analysis

Reported By

2

CVE-2020-11261

Qualcomm

Android

Logic/Design Flaw

Memory management logic error in kgsl driver

2020-07-20

2021-01-04

https://source.android.com/security/bulletin/2021-01-01

???

Man Yue Mo of GitHub Security Lab

3

CVE-2021-1647

Microsoft

Windows Defender

Memory Corruption

Unspecified remote code execution in Windows Defender

???

2021-01-12

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1647

???

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1647.html

???

4

CVE-2021-1782

Apple

iOS

Memory Corruption

Unspecified kernel race condition

???

2021-01-26

https://support.apple.com/en-us/HT212146

https://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html

???

5

CVE-2021-1870

Apple

WebKit

Logic/Design Flaw

Unspecified logic flaw in Webkit

???

2021-01-26

https://support.apple.com/en-us/HT212146

???

6

CVE-2021-1871

Apple

WebKit

Logic/Design Flaw

Unspecified logic flaw in Webkit

???

2021-01-26

https://support.apple.com/en-us/HT212146

???

7

CVE-2021-21148

Google

Chrome

Memory Corruption

Heap buffer overflow in V8

2021-01-24

2021-02-04

https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html

???

Mattias Buelens

8

CVE-2021-21017

Adobe

Reader

Memory Corruption

Heap-based buffer overflow

???

2021-02-09

https://helpx.adobe.com/security/products/acrobat/apsb21-09.html

https://github.com/ZeusBox/CVE-2021-21017

???

9

CVE-2021-1732

Microsoft

Windows

Memory Corruption

Unspecified win32k escalation of privilege

2020-12-10

2021-02-09

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1732

https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1732.html

JinQuan, MaDongZe, TuXiaoYi, and LiHao of DBAPPSecurity Co., Ltd

10

CVE-2021-26855

Microsoft

Exchange Server

Logic/Design Flaw

Server-side request forgery (SSRF)

???

2021-03-02

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855

https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-26855.html

Volexity, Orange Tsai from DEVCORE research team, and Microsoft Threat Intelligence Center (MSTIC)

11

CVE-2021-26857

Microsoft

Exchange Server

Logic/Design Flaw

Insecure deserialization in the Unifed Messaging service

???

2021-03-02

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26857

https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/

???

Dubex and Microsoft Threat Intelligence Center (MSTIC)

12

CVE-2021-26858

Microsoft

Exchange Server

Logic/Design Flaw

Arbitrary file write

???

2021-03-02

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26858

https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/

???

Microsoft Threat Intelligence Center

13

CVE-2021-27065

Microsoft

Exchange Server

Logic/Design Flaw

Arbitrary file write

???

2021-03-02

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27065

https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/

???

Volexity, Orange Tsai from DEVCORE research team, and Microsoft Threat Intelligence Center (MSTIC)

14

CVE-2021-21166

Google

Chrome

Memory Corruption

Object lifecycle issue in audio

2021-02-11

2021-03-02

https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html

https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-21166.html

Alison Huffman, Microsoft Browser Vulnerability Research & Clement Lecigne of Google Threat Analysis Group

15

CVE-2021-26411

Microsoft

Internet Explorer

Memory Corruption

Use-after-free in MSHTML

???

2021-03-09

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26411

https://enki.co.kr/blog/2021/02/04/ie_0day.html

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-26411.html

yangkang(@dnpushme) & huangyi(@C0rk1_H) & Enki

16

CVE-2021-21193

Google

Chrome

Memory Corruption

Use-after-free in Blink

2021-03-09

2021-03-12

https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html

???

17

CVE-2021-1879

Apple

WebKit

UXSS

Universal cross site scripting in Webkit

???

2021-03-26

https://support.apple.com/en-us/HT212256

https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1879.html

Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group

18

CVE-2021-28310

Microsoft

Windows

Memory Corruption

Out-of-bounds write vulnerability in dwmcore.dll

???

2021-04-13

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-28310

https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/

???

Boris Larin (Oct0xor) of Kaspersky Lab

19

CVE-2021-21206

Google

Chrome

Memory Corruption

Use-after-free in Blink

2021-04-07

2021-04-13

https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html

???

20

CVE-2021-30661

Apple

WebKit

Memory Corruption

Use-after-free in WebKit

???

2021-04-26

https://support.apple.com/en-us/HT212317

???

yangkang(@dnpushme) of 360 ATA

21

CVE-2021-30665

Apple

WebKit

Memory Corruption

Memory corruption related to state management in Webkit

???

2021-05-03

https://support.apple.com/en-us/HT212336

???

yangkang (@dnpushme)&zerokeeper&bianliang of 360 ATA

22

CVE-2021-30663

Apple

WebKit

Memory Corruption

Integer overflow in Webkit

???

2021-05-03

https://support.apple.com/en-us/HT212336

???

23

CVE-2021-1905

Qualcomm

Android

Memory Corruption

Use-after-free in GPU

2020-11-17

2021-05-03

https://source.android.com/security/bulletin/2021-05-01

???

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1905.html

???

24

CVE-2021-1906

Qualcomm

Android

Logic/Design Flaw

Improper error handling in GPU

2020-11-17

2021-05-03

https://source.android.com/security/bulletin/2021-05-01

???

25

CVE-2021-28663

ARM

Android

Memory Corruption

Use-after-free in Mali GPU

???

2021-05-03

https://source.android.com/security/bulletin/2021-05-01

https://github.com/lntrx/CVE-2021-28663

???

26

CVE-2021-28664

ARM

Android

Memory Corruption

Writes to read-only memory in Mali GPU

???

2021-05-03

https://source.android.com/security/bulletin/2021-05-01

???

27

CVE-2021-28550

Adobe

Reader

Memory Corruption

Use-after-free

???

2021-05-11

https://helpx.adobe.com/security/products/acrobat/apsb21-29.html

???

28

CVE-2021-31955

Microsoft

Windows

Logic/Design Flaw

Kernel information disclosure in SuperFetch

2021-04-14

2021-06-08

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31955

https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/

???

Boris Larin (Oct0xor) of Kaspersky Lab

29

CVE-2021-31956

Microsoft

Windows

Memory Corruption

Heap-based buffer overflow in ntfs.sys

2021-04-14

2021-06-08

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31956

https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/

???

Boris Larin (Oct0xor) of Kaspersky Lab

30

CVE-2021-33742

Microsoft

Internet Explorer

Memory Corruption

Out-of-bounds write in MSHTML

2021-06-03

2021-06-08

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33742

https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-33742.html

Clément Lecigne of Google’s Threat Analysis Group

31

CVE-2021-31199

Microsoft

Windows

???

Unspecified enhanced crypto provider escalation of privilege

???

2021-06-08

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31199

???

32

CVE-2021-31201

Microsoft

Windows

???

Unspecified enhanced crypto provider escalation of privilege

???

2021-06-08

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31201

???

33

CVE-2021-30551

Google

Chrome

Memory Corruption

Type confusion in v8

2021-06-03

2021-06-09

https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html

https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-30551.html

Clement Lecigne of Google's Threat Analysis Group and Sergei Glazunov of Google Project Zero

34

CVE-2021-30554

Google

Chrome

Memory Corruption

Use-after-free in WebGL

2021-06-15

2021-06-17

https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop_17.html

???

35

CVE-2021-33771

Microsoft

Windows

Memory Corruption

Unspecified kernel escalation of privilege

???

2021-07-13

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33771

https://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/

???

Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)

36

CVE-2021-34448

Microsoft

Internet Explorer

Memory Corruption

Unspecified scripting engine memory corruption

???

2021-07-13

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34448

???

yangkang(@dnpushme)&bianliang&wanggang&lihongfei of 360 ATA

37

CVE-2021-31979

Microsoft

Windows

Memory Corruption

Unspecified kernel escalation of privilege

???

2021-07-13

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31979

https://www.microsoft.com/security/blog/2021/07/15/protecting-customers-from-a-private-sector-offensive-actor-using-0-day-exploits-and-devilstongue-malware/

???

Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)

38

CVE-2021-30563

Google

Chrome

Memory Corruption

Type confusion in v8

2021-07-12

2021-07-15

https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html

???

39

CVE-2021-30807

Apple

iOS

Memory Corruption

Memory corruption in IOMobileFrameBuffer

???

2021-07-26

https://support.apple.com/en-us/HT212623

https://saaramar.github.io/IOMobileFrameBuffer_LPE_POC/

???

40

CVE-2021-36948

Microsoft

Windows

???

Windows update medic service elevation of privilege

???

2021-08-11

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36948

???

Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)

41

CVE-2021-30860

Apple

iOS

Memory Corruption

Integer overflow in CoreGraphics

2021-09-07

2021-09-13

https://support.apple.com/en-us/HT212807

https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html

???

The Citizen Lab

42

CVE-2021-30858

Apple

WebKit

Memory Corruption

Use-after-free in Indexed DB

???

2021-09-13

https://support.apple.com/en-us/HT212807

???

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-30858.html

???

43

CVE-2021-30632

Google

Chrome

Memory Corruption

Out of bounds write in V8

2021-09-08

2021-09-13

https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html

https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_30632/

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-30632.html

???

44

CVE-2021-30633

Google

Chrome

Memory Corruption

Use-after-free in Indexed DB

2021-09-08

2021-09-13

https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html

???

45

CVE-2021-31010

Apple

iOS

Logic/Design Flaw

Vulnerability in CommCenter

???

2021-09-13

https://support.apple.com/en-us/HT212807

https://googleprojectzero.blogspot.com/2022/03/forcedentry-sandbox-escape.html

???

The Citizen Lab & Google Project Zero

46

CVE-2021-40444

Microsoft

Internet Explorer

Logic/Design Flaw

Unspecified remote code execution in MSHTML

???

2021-09-14

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444

https://billdemirkapi.me/unpacking-cve-2021-40444-microsoft-office-rce/

???

Rick Cole (MSTIC), Dhanesh Kizhakkinan of Mandiant, Genwei Jiang of Mandiant, Haifei Li of EXPMON, and Byce Abdo of Mandiant

47

CVE-2021-30869

Apple

macOS

Memory Corruption

Type confusion in XNU

???

2021-09-23

https://support.apple.com/en-us/HT212825

https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/

???

Erye Hernandez of Google Threat Analysis Group, Clément Lecigne of Google Threat Analysis Group, and Ian Beer of Google Project Zero

48

CVE-2021-37973

Google

Chrome

Memory Corruption

Use-after-free in Portals

2021-09-21

2021-09-24

https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html

https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/

???

Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero

49

CVE-2021-37975

Google

Chrome

Memory Corruption

Use-after-free in V8

2021-09-24

2021-09-30

https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html

https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-37975.html

???

50

CVE-2021-37976

Google

Chrome

Memory Corruption

Information leak in Core

2021-09-21

2021-09-30

https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html

https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/

???

Clément Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero

51

CVE-2021-41773

Apache

HTTP Server

Logic/Design Flaw

Path traversal & file disclosure vulnerability

2021-09-29

2021-10-04

https://httpd.apache.org/security/vulnerabilities_24.html

???

Ash Daulton along with the cPanel Security Team

52

CVE-2021-30883

Apple

iOS

Memory Corruption

A memory corruption issue in IOMobileFrameBuffer

???

2021-10-11

https://support.apple.com/en-us/HT212846

https://saaramar.github.io/IOMFB_integer_overflow_poc/

???

53

CVE-2021-40449

Microsoft

Windows

Memory Corruption

Use-after-free in Win32k

???

2021-10-12

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40449

https://securelist.com/mysterysnail-attacks-with-windows-zero-day/104509/

???

Boris Larin (oct0xor) with Kaspersky

54

CVE-2021-38000

Google

Chrome

Logic/Design Flaw

Insufficient validation of untrusted input in Intents

2021-09-15

2021-10-28

https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html

https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-38000.html

Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group

55

CVE-2021-38003

Google

Chrome

Memory Corruption

Inappropriate implementation in V8

2021-10-26

2021-10-28

https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html

https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/

???

Clément Lecigne from Google TAG and Samuel Groß from Google Project Zero

56

CVE-2021-0920

Google

Android

Memory Corruption

Race condition during SCM_RIGHTS garbage collection

???

2021-11-05

https://source.android.com/security/bulletin/2021-11-01#kernel-components

https://googleprojectzero.blogspot.com/2022/08/the-quantum-state-of-linux-kernel.html

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-0920.html

???

57

CVE-2021-1048

Google

Android

Memory Corruption

Use-after-free in ep_loop_check_proc

???

2021-11-06

https://source.android.com/security/bulletin/2021-11-01#2021-11-06-security-patch-level-vulnerability-details

https://blog.google/threat-analysis-group/protecting-android-users-from-0-day-attacks/

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-1048.html

Clément Lecigne and Christian Resell from Google's Threat Analysis Group

58

CVE-2021-42292

Microsoft

Office

Logic/Design Flaw

Excel security feature bypass

???

2021-11-09

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42292

https://twitter.com/HaifeiLi/status/1486133229614616577

???

Microsoft Threat Intelligence Center (MSTIC)

59

CVE-2021-42321

Microsoft

Exchange Server

Logic/Design Flaw

Remote code execution

???

2021-11-09

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321

https://peterjson.medium.com/some-notes-about-microsoft-exchange-deserialization-rce-cve-2021-42321-110d04e8852

???

Microsoft Security Response Center, Microsoft Threat Intelligence Center (MSTIC), Yuhao Weng with Sangfor, and 漏洞研究院青训队 with Tianfu

60

CVE-2021-30983

Apple

iOS

Memory Corruption

Buffer overflow in IOMobileFrameBuffer

???

2021-12-13

https://support.apple.com/en-us/HT212976

https://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html

???

Pangu via Tianfu Cup

61

CVE-2021-25337

Samsung

Android

Logic/Design Flaw

Access control issues in clipboard provider

2020-11-03

2021-03-01

https://security.samsungmobile.com/securityUpdate.smsb

https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-25337.html

???

62

CVE-2021-25369

Samsung

Android

Logic/Design Flaw

Kernel info leak in sec_log

2020-12-10

2021-03-01

https://security.samsungmobile.com/securityUpdate.smsb

https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-25369.html

???

63

CVE-2021-25370

Samsung

Android

Memory Corruption

Use-after-free in dpu (DECON) driver

2020-12-10

2021-03-01

https://security.samsungmobile.com/securityUpdate.smsb

https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

???

64

CVE-2021-25371

Samsung

Android

Logic/Design Flaw

Possible to load arbitrary ELF library inside DSP

2020-12-22

2021-03-01

https://security.samsungmobile.com/securityUpdate.smsb

???

65

CVE-2021-25372

Samsung

Android

Memory Corruption

Out-of-bounds access vulnerability in DSP driver

2020-12-22

2021-03-01

https://security.samsungmobile.com/securityUpdate.smsb

???

66

CVE-2021-25394

Samsung

Android

Memory Corruption

Use-after-free in MFC charger driver

2020-12-31

2021-05-01

https://security.samsungmobile.com/securityUpdate.smsb

???

67

CVE-2021-25395

Samsung

Android

Memory Corruption

Use-after-free in MFC charger driver

2020-12-31

2021-05-01

https://security.samsungmobile.com/securityUpdate.smsb

???

68

CVE-2021-25487

Samsung

Android

Memory Corruption

Arbitrary code execution via OOB read in modem interface driver

2021-07-26

2021-10-01

https://security.samsungmobile.com/securityUpdate.smsb

???

69

CVE-2021-25489

Samsung

Android

Memory Corruption

Format string bug in modem interface driver

2021-07-16

2021-10-01

https://security.samsungmobile.com/securityUpdate.smsb

???

70

CVE-2021-4102

Google

Chrome

Memory Corruption

Use-after-free in V8

2021-12-09

2021-12-13

https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html

???

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

	A	B	C	D	E	F	G	H	I	J	K
1	CVE	Vendor	Product	Type	Description	Date Discovered	Date Patched	Advisory	Analysis URL	Root Cause Analysis	Reported By
2	CVE-2023-21674	Microsoft	Windows	Memory Corruption	ALPC elevation of privilege	???	2023-01-10	https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21674	???	???	Jan Vojtěšek, Milánek, and Przemek Gmerek with Avast
3	CVE-2022-4262	Google	Chrome	Memory Corruption	Type confusion in V8	2022-11-29	2022-12-02	https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html	???	???	Clement Lecigne of Google's Threat Analysis Group
4	CVE-2022-42856	Apple	WebKit	Memory Corruption	Type confusion	???	2022-11-30	https://support.apple.com/en-us/HT213516	???	???	Clément Lecigne of Google's Threat Analysis Group
5	CVE-2022-4135	Google	Chrome	Memory Corruption	Heap buffer overflow in GPU	2022-11-22	2022-11-24	https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html	???	???	Clement Lecigne of Google's Threat Analysis Group
6	CVE-2022-41040	Microsoft	Exchange Server	Logic/Design Flaw	Server-side request forgery	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41040	???	???	DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC working with Trend Micro Zero Day Initiative
7	CVE-2022-41082	Microsoft	Exchange Server	Logic/Design Flaw	Remote code execution	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41082	???	???	Piotr Bazydlo (@chudypb) and DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC working with Trend Micro Zero Day Initiative
8	CVE-2022-41128	Microsoft	Internet Explorer	Memory Corruption	JScript9 remote code execution	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-41128.html	Clément Lecigne of Google’s Threat Analysis Group
9	CVE-2022-41073	Microsoft	Windows	Memory Corruption	Print spooler elevation of privilege	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41073	???	???	Microsoft Threat Intelligence Center (MSTIC)
10	CVE-2022-41125	Microsoft	Windows	Memory Corruption	CNG Key Isolation Service elevation of privilege	???	2022-11-08	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41125	???	???	Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC)
11	CVE-2022-3723	Google	Chrome	Memory Corruption	Type confusion in V8	2022-10-25	2022-10-27	https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html	???	???	Jan Vojtěšek, Milánek, and Przemek Gmerek of Avast
12	CVE-2022-42827	Apple	iOS	Memory Corruption	Out-of-bounds write in the kernel	???	2022-10-24	https://support.apple.com/en-us/HT213489	???	???	???
13	CVE-2022-41033	Microsoft	Windows	Memory Corruption	COM+ event system service elevation of privilege	???	2022-10-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41033	???	???	???
14	CVE-2022-32917	Apple	iOS/macOS	Memory Corruption	Unspecified kernel vulnerability	???	2022-09-12	https://support.apple.com/en-us/HT213445	???	???	???
15	CVE-2022-3075	Google	Chrome	Logic/Design Flaw	Insufficient data validation in Mojo	2022-08-30	2022-09-02	https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html	???	???	???
16	CVE-2022-32894	Apple	iOS/macOS	Memory Corruption	Kernel out-of-bounds write	???	2022-08-17	https://support.apple.com/en-us/HT213413	???	???	???
17	CVE-2022-32893	Apple	WebKit	Memory Corruption	Out-of-bounds write	???	2022-08-17	https://support.apple.com/en-us/HT213413	???	???	???
18	CVE-2022-2856	Google	Chrome	Logic/Design Flaw	Insufficient validation of untrusted input in Intents	2022-07-19	2022-08-16	https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html	???	???	Ashley Shen and Christian Resell of Google Threat Analysis Group
19	CVE-2022-22047	Microsoft	Windows	Memory Corruption	CSRSS Elevation of Privilege	???	2022-07-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047	???	???	Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC)
20	CVE-2022-2294	Google	Chrome	Memory Corruption	Buffer overflow in WebRTC	2022-07-01	2022-07-04	https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-2294.html	Jan Vojtesek from the Avast Threat Intelligence team
21	CVE-2022-30190	Microsoft	Windows	Logic/Design Flaw	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	???	2022-06-14	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190	https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e	???	crazyman with Shadow Chaser Group
22	CVE-2022-26134	Atlassian	Confluence Server & Data Center	Logic/Design Flaw	Unauthenticated Remote Code Execution	2022-05-31	2022-06-03	https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html	https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/	???	Volexity
23	CVE-2022-26925	Microsoft	Windows	Logic/Design Flaw	Windows LSA Spoofing Vulnerability	???	2022-05-10	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26925	???	???	Raphael John with Bertelsmann Printing Group
24	CVE-2022-1364	Google	Chrome	Memory Corruption	Type confusion in V8	2022-04-13	2022-04-14	https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1364.html	Clément Lecigne of Google's Threat Analysis Group
25	CVE-2022-24521	Microsoft	Windows	Memory Corruption	Windows Common Log File System Driver Elevation of Privilege	???	2022-04-12	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24521	https://www.pixiepointsecurity.com/blog/nday-cve-2022-24521.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-24521.html	National Security Agency, Adam Podlosky and Amir Bazine of Crowdstrike
26	CVE-2022-22674	Apple	macOS	Memory Corruption	Out-of-bounds read in Intel Graphics Driver	???	2022-03-31	https://support.apple.com/en-us/HT213220	???	???	???
27	CVE-2022-22675	Apple	iOS/macOS	Memory Corruption	Out-of-bounds write in AppleAVD	???	2022-03-31	https://support.apple.com/en-us/HT213220	???	https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-22675.html	???
28	CVE-2022-26871	Trend Micro	Apex Central	Logic/Design Flaw	Arbitrary file upload remote code execution	???	2022-03-31	https://success.trendmicro.com/dcx/s/solution/000290678?language=en_US	???	???	Trend Micro Research
29	CVE-2022-1040	Sophos	Firewall	Logic/Design Flaw	Authentication bypass allowing RCE	???	2022-03-25	https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce	https://news.sophos.com/en-us/2022/06/15/sophos-uncovers-how-apt-groups-carried-out-highly-targeted-attack/	???	???
30	CVE-2022-1096	Google	Chrome	Memory Corruption	Type confusion in V8	2022-03-23	2022-03-25	https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-1096.html	???
31	CVE-2021-22600	Google	Pixel	Memory Corruption	Double free in packet_set_ring	???	2022-03-07	https://source.android.com/security/bulletin/pixel/2022-03-01	???	???	???
32	CVE-2021-39793	Google	Pixel	Memory Corruption	Out-of-bounds write in mali_base_mem	???	2022-03-07	https://source.android.com/security/bulletin/pixel/2022-03-01	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-39793.html	???
33	CVE-2022-26485	Mozilla	Firefox	Memory Corruption	Use-after-free inXSLT parameter processing	???	2022-03-05	https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/	???	???	Wang Gang, Liu Jialei, Du Sihang, Huang Yi & Yang Kang of 360 ATA
34	CVE-2022-26486	Mozilla	Firefox	Memory Corruption	Use-after-free in WebGPU IPC Framework	???	2022-03-05	https://www.mozilla.org/en-US/security/advisories/mfsa2022-09/	???	???	Wang Gang, Liu Jialei, Du Sihang, Huang Yi & Yang Kang of 360 ATA
35	CVE-2022-0609	Google	Chrome	Memory Corruption	Use-after-free in Animation	2022-02-10	2022-02-15	https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html	https://blog.google/threat-analysis-group/countering-threats-north-korea/	???	Adam Weidemann and Clément Lecigne of Google's Threat Analysis Group
36	CVE-2022-22620	Apple	WebKit	Memory Corruption	Unspecified use-after-free	???	2022-02-10	https://support.apple.com/en-us/HT213093	https://googleprojectzero.blogspot.com/2022/06/an-autopsy-on-zombie-in-wild-0-day.html	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-22620.html	???
37	CVE-2022-22587	Apple	iOS	Memory Corruption	Memory corruption in IOMobileFrameBuffer	???	2022-01-26	https://support.apple.com/en-us/HT213053	???	???	Meysam Firouzi (@R00tkitSMM) of MBition - Mercedes-Benz Innovation Lab, Siddharth Aeri (@b1n4r1b01), & an anonymous reporter
38	CVE-2022-21882	Microsoft	Windows	Memory Corruption	Win32k Elevation of Privilege	???	2022-01-11	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21882	???	https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-21882.html	Big CJTeam of Tianfu Cup & RyeLv (@b2ahex)
39	CVE-2021-30983	Apple	iOS	Memory Corruption	Buffer overflow in IOMobileFrameBuffer	???	2021-12-13	https://support.apple.com/en-us/HT212976	https://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html	???	Pangu via Tianfu Cup
40	CVE-2021-4102	Google	Chrome	Memory Corruption	Use-after-free in V8	2021-12-09	2021-12-13	https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html	???	???	???