Vendors / Ea Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 7
Exploited now Ea records in CISA KEV No Ea vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 54
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.23129 · Published 2019-04-19 · No fix listed CWE-74
Priority MEDIUM 53
An issue was discovered in Electronic Arts Origin before 10.5.39.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.13274 · Published 2019-06-14 · No fix listed CWE-19
Priority LOW 35
A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or System.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00591 · Published 2020-10-30 · No fix listed CWE-427
Priority LOW 35
Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00723 · Published 2020-02-20 · No fix listed
Priority LOW 34
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0039 · Published 2019-12-12 · No fix listed
Priority LOW 34
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0036 · Published 2019-12-12 · No fix listed
Open these records in search → All records by CVSS severity
0 7 5 0 0
THREATIST.IORead the docs