CVE-2019-13321

CVE-2019-13321 affects Xiaomi Browser prior to 10.4.0. The flaw is in the Captive Portal handling of HTTP responses; a crafted HTML response can cause the Captive Portal to open a browser to a specified location, enabling code execution in the context of the current process when combined with oth...

CVE-2019-13322

CVE-2019-13322 affects Xiaomi Browser (prior to 10.4.0). The flaw is in the miui.share handling, where lack of validation of user-supplied data can lead to downloading and executing an arbitrary application in the context of the user. Exploitation requires user interaction (visiting a malicious p...

CVE-2020-14116

CVE-2020-14116 affects Xiaomi Mi Browser. The issue is an open redirection vulnerability caused by Mi Browser not validating incoming data, enabling attackers to trigger sensitive operations. Related sources indicate vulnerability exists prior to version 15.8; remediation guidance suggests updati...