Ea - vulnerabilities (CVEs)

12 CVEs in 8 products, 0 in the last 30 days, newest from 2020-11-02.

Products

• Origin - 6 CVEs
• Crysis - 2 CVEs
• Battlefield 2 - 1 CVEs
• Battlefield 2142 - 1 CVEs
• Karotz Smart Rabbit Firmware - 1 CVEs
• Need For Speed Network - 1 CVEs
• Origin Client - 1 CVEs
• Karotz Smart Rabbit - 0 CVEs

Newest CVEs of Ea

• CVE-2020-27708 - CVSS 7.8 (high), 2020-11-02: A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System. Once the…
• CVE-2020-15914 - CVSS 5.4 (medium), 2020-11-02: A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker to execute…
• CVE-2019-19741 - CVSS 7.8 (high), 2020-02-20: Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than…
• CVE-2013-4867 - CVSS 6.3 (medium), 2019-12-27: Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
• CVE-2019-19248 - CVSS 7.8 (high), 2019-12-12: Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
• CVE-2019-19247 - CVSS 7.8 (high), 2019-12-12: Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
• CVE-2019-12828 - CVSS 8.8 (high), 2019-06-14: An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to…
• CVE-2019-11354 - CVSS 7.8 (high), 2019-04-19: The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to…
• CVE-2014-5921 - CVSS 5.4 (medium), 2014-09-18: The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows…
• CVE-2010-2627 - CVSS 6.8 (medium), 2010-07-02: Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142…
• CVE-2008-6737 - CVSS 7.8 (high), 2009-04-21: Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a…
• CVE-2008-6712 - CVSS 5 (medium), 2009-04-10: The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP…