Cmcm

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Cmcm records in CISA KEV

No Cmcm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Armorfly Browser & Downloader 1 record LOW Cm Backup Restore Cloud Photo 1 record LOW Cm Browser 1 record LOW Cm Browser - Fast & Secure 1 record LOW Cm Launcher 3d 1 record LOW

Records

5 records

TI-2018-03868 CVE-2018-5327 · GHSA-hhr5-hrp3-x4cg

Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified…

LOW 35

Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01173 Published 2018-01-12 No fix listed

TI-2018-03867 CVE-2018-5326 · GHSA-g44r-qfh9-rcj9

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android…

LOW 35

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01173 Published 2018-01-12 No fix listed

TI-2017-09743 CVE-2017-13106 · GHSA-v2xm-cm5x-fvv8

Hard-coded credentials in Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure…

LOW 35

Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2018-08-15 No fix listed CWE-798

TI-2014-04609 CVE-2014-5655 · GHSA-q6c2-pf69-g8m2

The CM Browser - Fast & Secure (aka com.ksmobile.cb) application 5.0.50 for Android does…

LOW 24

The CM Browser - Fast & Secure (aka com.ksmobile.cb) application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive info…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-09 No fix listed CWE-310

TI-2014-04594 CVE-2014-5640 · GHSA-vr8w-h4qv-2wv4

The CM Backup -Restore,Cloud,Photo (aka com.ijinshan.kbackup) application 1.1.0.135 for…

LOW 24

The CM Backup -Restore,Cloud,Photo (aka com.ijinshan.kbackup) application 1.1.0.135 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain se…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00293 Published 2014-09-09 No fix listed CWE-310

Open these records in search →

Critical	0
High	3
Medium	2
Low	0
No CVSS	0