Mi MI6 Browser vulnerabilities

2 CVEs affecting Mi MI6 Browser, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6743, published 2019-06-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-6065: Google Chromium V8 Integer Overflow Vulnerability, published 2018-11-14. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-06-08. EPSS: 60.3% chance of exploitation in the next 30 days. Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit…
CVE-2019-6743, published 2019-06-03. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. User interaction is required to exploit this vulnerability in…