Comparison Overview
Bank of America Merrill Lynch

Bank of America Merrill Lynch
100 North Tryon Street, Charlotte, 28255, US
Last Update: 01/04/2026
From local communities to global markets, we are dedicated to shaping the future responsibly and helping clients thrive in a changing world. “Bank of America Merrill Lynch” is the marketing name for the global banking and global markets businesses of Bank of America Co...

FactSet
43 Glover Ave, Norwalk, Connecticut, US, 06850
Last Update: 01/04/2026
FactSet creates flexible, open data and software solutions for tens of thousands of investment professionals around the world, providing instant access to financial data and analytics that investors use to make crucial decisions. For 40 years, through market changes a...
Compliance Ranges Comparison

Bank of America Merrill Lynch







FactSet






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Bank of America Merrill Lynch in 2026.
Incidents vs Financial Services Industry Avg (This Year)
FactSet has 3.85% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Bank of America Merrill Lynch (X = Date, Y = Severity)
Bank of America Merrill Lynch cyber incidents detection timeline including parent company and subsidiaries.
Incident History - FactSet (X = Date, Y = Severity)
FactSet cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Bank of America Merrill Lynch

FactSet
FAQ
Latest Global CVEs
Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High)
Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)