[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9nAD5FFhl5hNXN5qIeCVdaWY5UzM63cQlmQ5Pn__SDo":3,"g5a-risk:CVE-2014-6041":148},{"success":4,"data":5,"meta":146},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":91,"weaknesses":92,"weaknessesCount":42,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":130,"notableEvents":131},"CVE-2014-6041","What is CVE-2014-6041?","The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \\u0000 character, as demonstrated by an onclick=\"window.open('\\u0000javascript: sequence to the Android Browser application 4.2.1 or a third-party web browser.","The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \\u0000 character, as ...","2014-09-02T10:55:04.73","2026-06-17T00:12:29.98",5.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,4.9,false,[],0.18278,[33,33,33,33,33,33,33],"Medium",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"google","android_browser","4.2.1","cpe:2.3:a:google:android_browser:4.2.1:*:*:*:*:android:*:*",1,[44,49,53,57,60,64,68,72,75,77,79,81,83,85,87,89],{"url":45,"source":46,"tags":47},"http:\u002F\u002Fwww.rafayhackingarticles.net\u002F2014\u002F08\u002Fandroid-browser-same-origin-policy.html","Rafayhackingarticles",[48],"Exploit",{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F69548","Securityfocus",[],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fandroid.googlesource.com\u002Fplatform\u002Fexternal\u002Fwebkit\u002F+\u002F1368e05e8875f00e8d2529fe6050d08b55ea4d87","Googlesource",[],{"url":58,"source":55,"tags":59},"https:\u002F\u002Fandroid.googlesource.com\u002Fplatform\u002Fexternal\u002Fwebkit\u002F+\u002F7e4405a7a12750ee27325f065b9825c25b40598c",[],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fcommunity.rapid7.com\u002Fcommunity\u002Fmetasploit\u002Fblog\u002F2014\u002F09\u002F15\u002Fmajor-android-bug-is-a-privacy-disaster-cve-2014-6041","Rapid7",[],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F95693","Ibmcloud",[],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=8321185","Ycombinator",[],{"url":73,"source":70,"tags":74},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=8325807",[],{"url":45,"source":46,"tags":76},[48],{"url":50,"source":51,"tags":78},[],{"url":54,"source":55,"tags":80},[],{"url":58,"source":55,"tags":82},[],{"url":61,"source":62,"tags":84},[],{"url":65,"source":66,"tags":86},[],{"url":69,"source":70,"tags":88},[],{"url":73,"source":70,"tags":90},[],16,[93],{"id":94,"name":94,"description":95},"Unknown","CWE-264",[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2014-6041? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2014-6041, a medium severity cyber security vulnerability from 2014. The Android WebView in Android before 4.4 allows remote at...","CVE-2014-6041, CVE-2014-6041 vulnerability, CVE-2014-6041 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, google security, android_browser vulnerability","\u002Fwhat-is\u002Fcve-2014-6041",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2014-6041","Cybersecurity","CVE-2014-6041, CVE-2014-6041 vulnerability, CVE-2014-6041 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":28,"Negate":28,"Nodes":124},[125],{"Operator":126,"Negate":31,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":129,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AA9C2521-2BD1-4E27-BB52-7290E43D6F18",[],[132,139],{"id":133,"eventType":134,"eventTime":135,"details":136,"label":137,"color":138},"271ad232-580f-4238-857f-46970599e350","LOW_EPSS_DELTA","2025-10-09T04:07:09.703904+00:00","Daily EPSS score decreased by 0.186 on 2023-12-30","EPSS Score Decreased","green",{"id":140,"eventType":141,"eventTime":142,"details":143,"label":144,"color":145},"4df26a9f-8371-482b-ab6e-8093bd27abe3","HIGH_EPSS_DELTA","2025-10-10T04:07:07.626214+00:00","Daily EPSS score increased by 0.177 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":147,"version":22},1793255448922,{"score":149,"band":35,"action":150,"scoredAt":151},40,"Plan remediation","2026-07-01T10:19:04.799969+00:00"]