VDB
CVE-2018-9467
CVE-2018-9467
PUBLISHED
CVSS 9.800000190734863 CRITICAL
In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation.
EPSS 0.14% · 34.1th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.14%
34.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 7.1.1, 7.0, 9.0 | |
| Android | 8.1, 7, 8 | |
| android | 8, *, 7 |
Exploit Intelligence
Timeline
- Sep 5, 2018 CVE Published
- Nov 20, 2024 EPSS Score
- Dec 8, 2024 EPSS Score
- Dec 26, 2024 EPSS Score
- Jan 12, 2025 EPSS Score
- Jan 30, 2025 EPSS Score
- Feb 16, 2025 EPSS Score
- Mar 6, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Apr 10, 2025 EPSS Score
- Apr 27, 2025 EPSS Score
- May 15, 2025 EPSS Score