Approved changes feed: RSS · Atom

cpe:2.3:a:google:android_browser:4.2.1:*:*:*:*:android:*:*

part: a version: 4.2.1 update: *

VendorGoogle (f181d1eb-7269-5bae-b76e-e66ceb214562)
ProductAndroid Browser (09f200ca-b66c-5e43-8155-b4103d8698a7)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6041 vulnerable 2026-06-08 05:05:56.136403 Details available
The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \u0000 character, as demonstrated by an onclick="window.open('\u0000javascript: sequence to the Android Browser application 4.2.1 or a third-party web browser.
Published: 2014-09-02T10:00:00.000Z
Updated: 2024-08-06T12:03:02.324Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.