{"schema_version":"1","data":[{"id":3574,"advisory_id":"907acc79-2695-4495-aabf-cc8e122087e0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-38000","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:44.058224+00:00","extraction_method":"structured","technologies":["chromium-intents","core-kev"],"cve_ids":["CVE-2021-38000"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium Intents Improper Input Validation Vulnerability","summary":"Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-38000","products":[{"name":{"value":"Chromium Intents","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-38000","aliases":["CVE-2021-38000"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2021-38000","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38000","dueDate":"2021-11-17","product":"Chromium Intents","dateAdded":"2021-11-03","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium Intents Improper Input Validation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-38000","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1459,"advisory_id":"e2f4f7e9-9c26-4f60-aba5-10f268c92b03","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2856","source_published_at":"2022-08-18T00:00:00+00:00","published_at":"2026-10-24T21:02:48.531472+00:00","extraction_method":"structured","technologies":["chromium-intents","core-kev"],"cve_ids":["CVE-2022-2856"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Google Chromium Intents Insufficient Input Validation Vulnerability","summary":"Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-2856","products":[{"name":{"value":"Chromium Intents","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-2856","aliases":["CVE-2022-2856"],"affected":[],"modified":"2022-08-18T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2022-2856","notes":"https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-2856","dueDate":"2022-09-08","product":"Chromium Intents","dateAdded":"2022-08-18","vendorProject":"Google","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","vulnerabilityName":"Google Chromium Intents Insufficient Input Validation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-2856","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3574,"next_before":1459}