Known Vulnerabilities for products from Ea
Listed below are 12 of the newest known vulnerabilities associated with the vendor "Ea".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-27708 json | A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Admi... | 7.8 - HIGH | 2020-11-02 | 2021-07-21 |
| CVE-2020-15914 json | A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a r... | 5.4 - MEDIUM | 2020-11-02 | 2020-11-12 |
| CVE-2019-19741 json | Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation... | 7.8 - HIGH | 2020-02-20 | 2023-11-07 |
| CVE-2019-19248 json | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2). | 7.8 - HIGH | 2019-12-12 | 2020-08-24 |
| CVE-2019-19247 json | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2). | 7.8 - HIGH | 2019-12-12 | 2020-08-24 |
| CVE-2019-12828 json | An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:/... | 8.8 - HIGH | 2019-06-14 | 2019-06-24 |
| CVE-2019-11354 json | The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 ... | 7.8 - HIGH | 2019-04-19 | 2022-04-18 |
| CVE-2014-5921 json | The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates from S... | Not Provided | 2014-09-18 | 2026-05-06 |
| CVE-2013-4867 json | Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking | 6.3 - MEDIUM | 2019-12-27 | 2020-01-13 |
| CVE-2010-2627 json | Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and ea... | Not Provided | 2010-07-02 | 2026-04-29 |
| CVE-2008-6737 json | Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a... | Not Provided | 2009-04-21 | 2026-04-23 |
| CVE-2008-6712 json | The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of se... | Not Provided | 2009-04-10 | 2026-04-23 |
Known software with vulnerabilities from Ea
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ea | Origin | 10.5.36 |
| Application | Ea | Origin Client | 10.5.86 |