{"metadata": {"vulnerability": "cve-2026-28609", "count": 21, "kinds": {"milestone": 6, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-03-02T19:11:06.138Z", "date_only": false, "value": "2026-03-02T19:11:06.138Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-28609", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-07T00:00:00Z", "date_only": true, "value": "2026-09-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1158", "record": "CERTFR-2026-AVI-1158", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-08T18:04:54.008Z", "date_only": false, "value": "2026-09-08T18:04:54.008Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-28609", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-08T18:04:54.008Z", "date_only": false, "value": "2026-09-08T18:04:54.008Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / google_android", "record": "cve-2026-28609", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-08T19:07:07.224Z", "date_only": false, "value": "2026-09-08T19:07:07.224993Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117236985026452664", "record": "CVE-2026-28609", "field": "creation_timestamp", "uuid": "452f3e95-84c0-4b88-9e78-403e41f648a1", "content": "The severity is increased for this new vulnerability affecting Google Android (CVE-2026-28609) https://vuldb.com/vuln/400204", "url": "https://infosec.exchange/users/vuldb/statuses/117236985026452664"}, {"timestamp": "2026-09-08T19:17:53Z", "date_only": false, "value": "2026-09-08T19:17:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6CG4-96XX-XG28", "record": "GHSA-6CG4-96XX-XG28", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-08T19:17:53.053Z", "date_only": false, "value": "2026-09-08T19:17:53.053", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28609", "record": "FKIE_CVE-2026-28609", "field": "published"}, {"timestamp": "2026-09-08T21:34:14Z", "date_only": false, "value": "2026-09-08T21:34:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6CG4-96XX-XG28", "record": "GHSA-6CG4-96XX-XG28", "field": "published"}, {"timestamp": "2026-09-09T04:46:05.648Z", "date_only": false, "value": "2026-09-09T04:46:05.648572Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "record": "CVE-2026-28609", "field": "creation_timestamp", "uuid": "91f73395-bf7b-4725-9755-cc4e0fc8ac8d", "url": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1158", "record": "CERTFR-2026-AVI-1158", "field": "last_revision_date"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1158", "record": "CERTFR-2026-AVI-1158", "field": "initial_release_date"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1158", "record": "CERTFR-2026-AVI-1158", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-10T03:57:09.136Z", "date_only": false, "value": "2026-09-10T03:57:09.136886Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-28609", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-09-10T03:57:09.136Z", "date_only": false, "value": "2026-09-10T03:57:09.136886Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28609", "record": "FKIE_CVE-2026-28609", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-10T14:56:51.109Z", "date_only": false, "value": "2026-09-10T14:56:51.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-28609", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-10T14:56:51.109Z", "date_only": false, "value": "2026-09-10T14:56:51.109Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-28609", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-10T15:32:59Z", "date_only": false, "value": "2026-09-10T15:32:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6CG4-96XX-XG28", "record": "GHSA-6CG4-96XX-XG28", "field": "modified"}, {"timestamp": "2026-09-15T14:17:03.557Z", "date_only": false, "value": "2026-09-15T14:17:03.557", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-28609", "record": "FKIE_CVE-2026-28609", "field": "lastModified"}, {"timestamp": "2026-09-20T20:00:04.743Z", "date_only": false, "value": "2026-09-20T20:00:04.743001Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102897", "record": "CVE-2026-28609", "field": "creation_timestamp", "uuid": "44a1fea1-ddcd-4e43-baae-3a2af673aa8b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-28609-matroska-pcm-oob\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a devrodT2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 17:55:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102897"}, {"timestamp": "2026-09-22T07:00:06.194Z", "date_only": false, "value": "2026-09-22T07:00:06.194530Z", "kind": "sighting", "label": "Seen", "source": "Telegram/F-nhc0ijtr3NaromnbizNbgs7TOvAKcStOoCvZVO5zQF_tg", "record": "CVE-2026-28609", "field": "creation_timestamp", "uuid": "0fe63ce6-ddec-4798-9537-fb8bf4a6147e"}, {"timestamp": "2026-09-23T00:00:25.013Z", "date_only": false, "value": "2026-09-23T00:00:25.013977Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/F-nhc0ijtr3NaromnbizNbgs7TOvAKcStOoCvZVO5zQF_tg", "record": "CVE-2026-28609", "field": "creation_timestamp", "uuid": "885f2169-a5f2-48eb-ace7-4d73da615d71"}]}