{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:29.422Z","products":["google"],"actNowTotal":5,"results":[{"query":"google","matched":5,"actNow":5,"events":[{"id":"kev-2026-10-27-google-brotli","url":"https://securitythreatpulse.com/events/kev-2026-10-27-google-brotli","title":"Google Brotli: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 19 days old, so many systems are likely still unpatched. The severity score is critical (9.2). The exploit prediction score is 83%.","tier":"now","rankScore":5,"rankWhy":["Exploitation is confirmed by an authoritative source.","The confirmation is 15 days old.","12 products are affected."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-111497"],"vendor":"Google","product":"Brotli","affectedProducts":[{"kind":"direct","slug":"google/brotli","vendor":"Google","product":"Brotli","evidence":["kev","cpe"],"vendorKey":"google","productKey":"brotli"},{"kind":"direct","slug":"nodejs/nodejs","vendor":"Nodejs","product":"Nodejs","evidence":["cpe"],"vendorKey":"nodejs","productKey":"nodejs"},{"kind":"direct","slug":"pythonhyper/brotlicffi","vendor":"Python-hyper","product":"Brotlicffi","evidence":["cpe"],"vendorKey":"pythonhyper","productKey":"brotlicffi"},{"kind":"direct","slug":"microsoft/net","vendor":"Microsoft","product":".NET","evidence":["cpe"],"vendorKey":"microsoft","productKey":"net"},{"kind":"direct","slug":"debian/debianlinux","vendor":"Debian","product":"Debian Linux","evidence":["cpe"],"vendorKey":"debian","productKey":"debianlinux"},{"kind":"direct","slug":"istio/istio","vendor":"Istio","product":"Istio","evidence":["cpe"],"vendorKey":"istio","productKey":"istio"},{"kind":"direct","slug":"anthropic/bun","vendor":"Anthropic","product":"Bun","evidence":["cpe"],"vendorKey":"anthropic","productKey":"bun"},{"kind":"direct","slug":"envoyproxy/envoy","vendor":"Envoyproxy","product":"Envoy","evidence":["cpe"],"vendorKey":"envoyproxy","productKey":"envoy"},{"kind":"direct","slug":"tianocore/edk2","vendor":"Tianocore","product":"Edk2","evidence":["cpe"],"vendorKey":"tianocore","productKey":"edk2"},{"kind":"direct","slug":"google/woff2","vendor":"Google","product":"Woff2","evidence":["cpe"],"vendorKey":"google","productKey":"woff2"},{"kind":"direct","slug":"duckdb/duckdb","vendor":"Duckdb","product":"Duckdb","evidence":["cpe"],"vendorKey":"duckdb","productKey":"duckdb"},{"kind":"direct","slug":"clickhouse/clickhouse","vendor":"Clickhouse","product":"Clickhouse","evidence":["cpe"],"vendorKey":"clickhouse","productKey":"clickhouse"}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.","cvss":9.2,"epss":0.82641,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-10-27","kevDueDate":"2026-11-10","firstSeenAt":"2026-10-27T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-11T07:30:04.059Z"},{"id":"early-cve-2026-125350","url":"https://securitythreatpulse.com/events/early-cve-2026-125350","title":"Google Chrome: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is new today, so almost nothing is patched yet.","tier":"now","rankScore":5,"rankWhy":["Exploitation is confirmed by an authoritative source.","The confirmation is 1 day old."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-125350"],"vendor":"Google","product":"Chrome","affectedProducts":[{"kind":"direct","slug":"google/chrome","vendor":"Google","product":"Chrome","evidence":["kev","cpe"],"vendorKey":"google","productKey":"chrome"}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","cvss":8.8,"epss":null,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-11-10","kevDueDate":"2026-11-24","firstSeenAt":"2026-11-10T07:04:20.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-11T07:25:37.953Z"},{"id":"kev-2026-09-09-google-chromium-v8","url":"https://securitythreatpulse.com/events/kev-2026-09-09-google-chromium-v8","title":"Google Chromium V8: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 60 days old, so many systems are likely still unpatched.","tier":"now","rankScore":3,"rankWhy":["Exploitation is confirmed by an authoritative source."],"rulesVersion":"v3","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-87491"],"vendor":"Google","product":"Chromium V8","affectedProducts":[{"kind":"direct","slug":"google/chromiumv8","vendor":"Google","product":"Chromium V8","evidence":["kev"],"vendorKey":"google","productKey":"chromiumv8"}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","cvss":8.8,"epss":0.03507,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-09-09","kevDueDate":"2026-09-23","firstSeenAt":"2026-09-09T00:00:00.000Z","updatedAt":"2026-11-08T16:37:40.566Z","newestEvidenceAt":"2026-11-03T16:09:23.000Z"},{"id":"kev-2026-09-16-google-pixel","url":"https://securitythreatpulse.com/events/kev-2026-09-16-google-pixel","title":"Google Pixel: attackers can gain admin rights","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 56 days old, so many systems are likely still unpatched.","tier":"now","rankScore":3,"rankWhy":["Exploitation is confirmed by an authoritative source."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-58704"],"vendor":"Google","product":"Pixel","affectedProducts":[{"kind":"direct","slug":"google/pixel","vendor":"Google","product":"Pixel","evidence":["kev"],"vendorKey":"google","productKey":"pixel"},{"kind":"direct","slug":"google/android","vendor":"Google","product":"Android","evidence":["cpe"],"vendorKey":"google","productKey":"android"}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Google Pixel devices contain an improper authorization vulnerability in the cellular modem. A logic error may allow an attacker to bypass permission checks and escalate privileges.","cvss":8.8,"epss":0.00625,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-09-16","kevDueDate":"2026-09-19","firstSeenAt":"2026-09-16T00:00:00.000Z","updatedAt":"2026-11-10T19:00:05.642Z","newestEvidenceAt":"2026-09-16T00:00:00.000Z"},{"id":"kev-2026-09-04-google-chromium-v8","url":"https://securitythreatpulse.com/events/kev-2026-09-04-google-chromium-v8","title":"Google Chromium V8: attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 61 days old, so current versions are being attacked.","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-85046"],"vendor":"Google","product":"Chromium V8","affectedProducts":[{"vendorKey":"google","productKey":"chromiumv8","vendor":"Google","product":"Chromium V8","slug":"google/chromiumv8","kind":"direct","evidence":["kev"]}],"category":{"id":"endpoint","label":"Computers, phones and browsers","why":"It runs on staff computers, phones or browsers.","doThis":"Install the latest updates on every device, and turn on automatic updates."},"summary":"Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","cvss":8.8,"epss":0.01806,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-09-04","kevDueDate":"2026-09-18","firstSeenAt":"2026-09-04T00:00:00.000Z","updatedAt":"2026-11-03T19:37:40.448Z","newestEvidenceAt":"2026-11-03T16:09:23.000Z"}]}]}