Read the docs

Oculus

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Oculus records in CISA KEV

No Oculus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Desktop 2 records LOW Oculus Browser 1 record LOW

Records

2 records in Desktop · all components

TI-2020-01812 CVE-2020-1885 · GHSA-jmc3-547v-q3qv

Link following in Meta Oculus Desktop

Priority LOW 34

Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involvin…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2020-04-08 No fix listed CWE-59
TI-2021-06354 CVE-2021-24038 · GHSA-gr73-xmrv-34fc

Improper privilege management in Meta Oculus Desktop

Priority LOW 33

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2021-08-18 Fixed in 31.1.0.67.507 CWE-269
Open these records in search →