27 matches found
CVE-2020-7364 UCWeb UC Browser Address Bar Spooofing
User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects UCWeb's UC Browser version 13.0.8 and prior versions...
CVE-2020-7363 UCWeb UC Browser Address Bar Spooofing
User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects UCWeb's UC Browser version 13.0.8 and prior versions...
CVE-2019-10250
UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks...
Design/Logic Flaw
UCWeb UC Browser 7.0.185.1002 on Windows uses HTTP for downloading certain PDF modules, which allows MITM attacks...
CVE-2019-10251
The CVE-2019-10251 entry concerns the UCWeb UC Browser on Android (pre-2020) that downloads modules tied to PDF/Office processing via libpicsel over HTTP. This insecure HTTP traffic enables man‑in‑the‑middle attacks against module downloads, exposing users to potential data interception or tamper...
CVE-2019-10250
Summary (CVE-2019-10250) : UCWeb UC Browser 7.0.185.1002 on Windows downloads certain PDF modules over HTTP, enabling man‑in‑the‑middle (MITM) attacks. Root cause: unencrypted HTTP module retrieval. Impact: potential confidentiality exposure via MITM. Exploitation details or active exploit status...