CVE-2019-3562

6.1 mediumEPSS 1.1%

Medium (6.1) in oculus oculus browser. EPSS 1.1% chance of exploitation in the next 30 days.

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-74
Published: 2019-04-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oculus:oculus_browser

References

https://www.facebook.com/security/advisories/cve-2019-3562
https://www.facebook.com/security/advisories/cve-2019-3562

Check your stack JSON