Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Oculus Clear all filters
TI-2021-06354 CVE-2021-24038 · GHSA-gr73-xmrv-34fc

Improper privilege management in Meta Oculus Desktop

Priority LOW 33

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2021-08-18 Fixed in 31.1.0.67.507 CWE-269
TI-2020-01812 CVE-2020-1885 · GHSA-jmc3-547v-q3qv

Link following in Meta Oculus Desktop

Priority LOW 34

Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involvin…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2020-04-08 No fix listed CWE-59
TI-2019-02627 CVE-2019-3562 · GHSA-3r49-5cp4-92j3

Injection in Oculus Browser

Priority LOW 29

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01096 Published 2019-04-29 No fix listed CWE-74