TI-2019-02627 CVE-2019-3562 · GHSA-3r49-5cp4-92j3
Injection in Oculus Browser
Priority LOW 29
A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code.
No Oculus vulnerabilities are listed in CISA KEV.
1 record in Oculus Browser · all components
A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code.