CVE-2017-20041: Ucweb UC Browser HTML URL improper restriction of rendered ui layers

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-06-13 · updated 2026-06-17
Weakness: CWE-1021

Description

A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. The manipulation of the argument title leads to improper restriction of rendered ui layers (URL). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

UCWeb UC Browser: 11.2.5.932

References

http://seclists.org/fulldisclosure/2017/Mar/36
https://vuldb.com/?id.98214
http://seclists.org/fulldisclosure/2017/Mar/36
https://vuldb.com/?id.98214

Get alerted when CVE-2017-20041 or the next vulnerability affects your stack