CVE-2018-18334 Vulnerability Details

  /     /     /  

CVE-2018-18334 Metadata Quick Info

CVE Published: 05/02/2019 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: trendmicro | Vendor: Trend Micro | Product: Trend Micro Dr. Safety for Android (Consumer)
Status : PUBLISHED

---

CVE-2018-18334 Description

A vulnerability in the Private Browser of Trend Micro Dr. Safety for Android (Consumer) versions below 3.0.1478 could allow an remote attacker to bypass the Same Origin Policy (SOP) and obtain sensitive information via crafted JavaScript code on vulnerable installations.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: SOP Bypass
Source: Trend Micro

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).