CVE-2023-20963

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 5, 2026

EPSS Score

Source: FIRST.org · 2026-05-24
1.19%
probability
This CVE has a 1.19% probability of being exploited in the next 30 days.
0% Top 79.0th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Framework vulnerability in Parcels

Attack Intelligence

Google Project Zero

Patched
March 6, 2023
Reported by
Sergey Toshin (@bagipro) from Oversecured Inc. (https://oversecured.com/)
Root Cause Analysis
https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-20963.html

Signal Intelligence

Confidence
95%
EPSS 1.19%
Mentions 0

CNA Information

Analyst Note

Auto-imported from Google Project Zero — confirmed zero-day by definition.

Triage Info

Decided atMar 05, 2026