6 matches found
EUVD-2026-124719
Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...
CVE-2026-127209
Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...
CVE-2026-127209 Xiaomi Mi Browser < 14.66.0 Path Traversal via ThirdDocViewerActivity
Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...
CVE-2026-127209
The Xiaomi Mi Browser Android Application (com.mi.globalbrowser) prior to version 14.66.0-gn is vulnerable to a path traversal vulnerability within the exported ThirdDocViewerActivity component. The root cause is that the CopyExternalFile.copyFromUri() function copies content provider streams usi...
CVE-2026-127209: Xiaomi Mi Browser (com.mi.globalbrowser): Xiaomi Mi Browser Android Application (com.mi.globalbrowser) before 14.66.0-gn contains a path traversal vulnerability…
Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...
PT-2026-146061
Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the display name column...