cmcm records

5 published records for vendor cmcm.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2018-5326No exploit	Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass.cmcm · cm browser Pre-auth	High7.5	—	1.2%	Jan 11, 2018
30Monitor	CVE-2018-5327No exploit	Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policycmcm · armorfly browser \& downloader Pre-auth	High7.5	—	1.2%	Jan 11, 2018
30Monitor	CVE-2017-13106No exploit	Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryptioncmcm · cm launcher 3d · CWE-798 Pre-auth Hard-coded credentials	High7.5	—	1.0%	Aug 15, 2018
21Monitor	CVE-2014-5640No exploit	The CM Backup -Restore,Cloud,Photo (aka com.ijinshan.kbackup) application 1.1.0.135 for Android does not verify X.509 certificates from SSL cmcm · cm backup restore cloud photo · CWE-310	Medium5.4	—	0.3%	Sep 8, 2014
21Monitor	CVE-2014-5655No exploit	The CM Browser - Fast & Secure (aka com.ksmobile.cb) application 5.0.50 for Android does not verify X.509 certificates from SSL servers, whicmcm · cm browser - fast \& secure · CWE-310	Medium5.4	—	0.3%	Sep 8, 2014

CVE-2018-5326
30Monitor
Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
cmcm · cm browserJan 11, 2018
CVE-2018-5327
30Monitor
Cheetah Mobile Armorfly Browser & Downloader 1.1.05.0010, when installed on unspecified "older" Android platforms, allows Same Origin Policy
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
cmcm · armorfly browser \& downloaderJan 11, 2018
CVE-2017-13106
30Monitor
Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
cmcm · cm launcher 3dAug 15, 2018
CVE-2014-5640
21Monitor
The CM Backup -Restore,Cloud,Photo (aka com.ijinshan.kbackup) application 1.1.0.135 for Android does not verify X.509 certificates from SSL
MediumCVSS 5.4No exploitEPSS 0%
cmcm · cm backup restore cloud photoSep 8, 2014
CVE-2014-5655
21Monitor
The CM Browser - Fast & Secure (aka com.ksmobile.cb) application 5.0.50 for Android does not verify X.509 certificates from SSL servers, whi
MediumCVSS 5.4No exploitEPSS 0%
cmcm · cm browser - fast \& secureSep 8, 2014