icu-project international components for unicode

Name: icu-project international components for unicode
Brand: icu-project

productUS

cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

7critical11high3medium0low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-8146US	high7.5	24.7% (98th)	Exploit	55.1	2015-05-25	< 55.1
CVE-2014-8147US	high7.5	23.6% (98th)	Exploit	55.1	2015-05-25	< 55.1
CVE-2011-4599US	high7.5	7.91% (95th)	—	49.1	2012-06-21	< 49.1
CVE-2016-7415US	critical9.8	5.80% (93rd)	—	no fix	2016-09-17	≤ 57.1
CVE-2014-9911US	critical9.8	5.56% (93rd)	—	54.1	2017-01-04	< 54.1
CVE-2017-14952US	critical9.8	5.10% (92nd)	—	no fix	2017-10-16	≤ 59.1
CVE-2016-6293US	critical9.8	5.02% (92nd)	—	no fix	2016-07-25	≤ 57.1
CVE-2017-7867US	high7.5	4.63% (92nd)	—	no fix	2017-04-14	≤ 58.2
CVE-2017-17484US	critical9.8	4.48% (91st)	—	no fix	2017-12-10	≤ 60.1
CVE-2017-7868US	high7.5	4.45% (91st)	—	no fix	2017-04-14	≤ 58.2
CVE-2015-5922US	high10.0	2.96% (87th)	—	53.1	2015-10-09	< 53.1
CVE-2007-4770US	medium6.8	2.93% (87th)	—	no fix	2008-01-29	≤ 3.8.1
CVE-2018-18928US	critical9.8	2.90% (87th)	—	no fix	2018-11-04	= 63.1
CVE-2020-10531US	high8.8	2.67% (86th)	—	no fix	2020-03-12	≤ 66.1
CVE-2007-4771US	high9.3	2.54% (85th)	—	no fix	2008-01-29	≤ 3.8.1
CVE-2017-15422US	medium6.5	2.54% (85th)	—	60.1	2018-08-28	< 60.1
CVE-2014-9654US	critical9.8	2.42% (84th)	—	55.1	2017-04-24	< 55.1
CVE-2014-7926US	high7.5	2.22% (83rd)	—	55.1	2015-01-22	< 55.1
CVE-2014-7923US	high7.5	2.22% (83rd)	—	55.1	2015-01-22	< 55.1
CVE-2017-15396US	medium6.5	2.20% (82nd)	—	60.2	2018-08-28	< 60.2
CVE-2014-7940US	high7.5	2.07% (81st)	—	no fix	2015-01-22	≤ 52.1

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer8 CVEs
CWE-17CWE-173 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-399CWE-3993 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-189CWE-1891 CVEs
CWE-254CWE-2541 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.