Browse CVEs

HIGH 7.8 CVE-2020-27708 A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System. Onc… Origin after 10.5.86 Fix from $1,9502020-11-02 MEDIUM 5.4 CVE-2020-15914 A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker to execut… Origin Client after 10.5.86 Fix from $1,6002020-11-02 HIGH 7.8 CVE-2019-19741 Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than… Origin 10.5.56.33908+ Fix from $1,9502020-02-20 MEDIUM 6.3 CVE-2013-4867 Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking Karotz Smart Rabbit Firmware No fix yet Fix from $1,6002019-12-27 HIGH 7.8 CVE-2019-19247 Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2). Origin after 10.5.56.33908 Fix from $1,9502019-12-12 HIGH 7.8 CVE-2019-19248 Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2). Origin after 10.5.55.33574 Fix from $1,9502019-12-12 HIGH 8.8 CVE-2019-12828EPSS 13% An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is pos… Origin 10.5.39+ Fix from $1,9502019-06-14 HIGH 7.8 CVE-2019-11354EPSS 23% The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be… Origin No fix yet Fix from $1,9502019-04-19 MEDIUM 5.4 CVE-2014-5921 The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows… Need For Speed Network Mitigation only Fix from $1,6002014-09-18 MEDIUM 6.8 CVE-2010-2627 Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2… Battlefield 2 after 2.1.50 Fix from $1,6002010-07-02 HIGH 7.8 CVE-2008-6737 Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet with… Crysis after 1.21 Fix from $1,9502009-04-21 MEDIUM 5.0 CVE-2008-6712EPSS 7% The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long… Crysis after 1.21 Fix from $1,6002009-04-10